{"vulnerability": "2025-07", "sightings": [{"uuid": "829d8274-e6c5-492c-ae8d-9af9f7334633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113911205892815118", "content": "", "creation_timestamp": "2025-01-29T10:37:43.094813Z"}, {"uuid": "ba87b352-23d0-4d25-b477-da1683f4ef02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5l5mti2u", "content": "", "creation_timestamp": "2025-01-30T15:24:55.626870Z"}, {"uuid": "8ef99f90-98d6-4b5e-a72b-5393abe1880f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0783", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgt645pve72r", "content": "", "creation_timestamp": "2025-01-28T19:15:31.986034Z"}, {"uuid": "f5ba5590-1932-490a-8d20-e624d882af15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5kvogx2g", "content": "", "creation_timestamp": "2025-01-30T15:24:54.559056Z"}, {"uuid": "659808da-7587-4c08-b922-2279e2d0c43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5kzyev2q", "content": "", "creation_timestamp": "2025-01-30T15:24:55.088174Z"}, {"uuid": "aa67e7f4-5927-41c1-b98b-1ab96c80e7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lkhif2r", "content": "", "creation_timestamp": "2025-01-30T15:24:57.230120Z"}, {"uuid": "77e8b8da-d01d-418a-9a6d-daef36ced4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lnpaf2q", "content": "", "creation_timestamp": "2025-01-30T15:24:57.734988Z"}, {"uuid": "35d59d3a-d0ea-4072-9556-e9ff9a089ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lqzh52r", "content": "", "creation_timestamp": "2025-01-30T15:24:58.266319Z"}, {"uuid": "911903e8-f7b4-4875-a2ff-bd4a3d57c589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5ludha2i", "content": "", "creation_timestamp": "2025-01-30T15:24:58.759351Z"}, {"uuid": "fe334fd4-6add-4253-8d9e-f43445ccf629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lxxcp25", "content": "", "creation_timestamp": "2025-01-30T15:24:59.327294Z"}, {"uuid": "f615e64f-6f31-4956-8bc5-0e0024d9c420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5m3ehf2q", "content": "", "creation_timestamp": "2025-01-30T15:24:59.906885Z"}, {"uuid": "79fcb5d8-b826-402f-a435-e3bc1230fa1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5kton2g", "content": "", "creation_timestamp": "2025-01-27T18:55:22.739757Z"}, {"uuid": "bae6fce3-3cc5-48bd-aedc-308ddf12392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5m6moo2h", "content": "", "creation_timestamp": "2025-01-30T15:25:00.543420Z"}, {"uuid": "a6eac9e7-07b9-40fd-891a-41c92053b921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgutrbm2s52f", "content": "", "creation_timestamp": "2025-01-29T11:15:49.027076Z"}, {"uuid": "fb8672fe-5b24-418a-af4a-954a2f961852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5mbx252y", "content": "", "creation_timestamp": "2025-01-30T15:25:01.192684Z"}, {"uuid": "67d2c802-c369-4484-94e7-ad9e644a3171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5mgaff2q", "content": "", "creation_timestamp": "2025-01-30T15:25:01.867535Z"}, {"uuid": "15649187-4190-4cce-90cf-ec90a2b77acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj622yf2g", "content": "", "creation_timestamp": "2025-01-27T18:55:25.184658Z"}, {"uuid": "72d52a79-ac59-469a-8972-43fc2e275063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhg6ld6ww626", "content": "", "creation_timestamp": "2025-02-05T08:44:37.003673Z"}, {"uuid": "953af47a-37f3-4ee3-bda9-53caa1999872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0734", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnp6rbo727", "content": "", "creation_timestamp": "2025-01-27T19:16:37.464666Z"}, {"uuid": "02099035-6d92-4595-99e6-d6c32411c03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhiqmthlpq24", "content": "", "creation_timestamp": "2025-02-06T09:12:53.541617Z"}, {"uuid": "d4c91455-fee2-49d4-935c-17797b715f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://mastodon.social/users/bagder/statuses/113950689344335993", "content": "", "creation_timestamp": "2025-02-05T09:58:56.677288Z"}, {"uuid": "f7a5dcd7-c110-4222-9724-102429a51dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3lhgcqgos5ce2", "content": "", "creation_timestamp": "2025-02-05T10:00:23.779217Z"}, {"uuid": "be827af0-f20e-4e04-bc27-0199b6667fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhjksfn3e724", "content": "", "creation_timestamp": "2025-02-06T17:01:17.901072Z"}, {"uuid": "d495a736-95b4-409d-987a-5967ec016273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhgdom4bjj2c", "content": "", "creation_timestamp": "2025-02-05T10:16:03.970795Z"}, {"uuid": "de050d2a-3084-4cdb-9bf7-78057512e838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0784", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907786969460977", "content": "", "creation_timestamp": "2025-01-28T20:08:14.532882Z"}, {"uuid": "d48003ac-cf04-42e7-b024-748df77dd0e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtbjacphu2t", "content": "", "creation_timestamp": "2025-01-28T20:16:32.439498Z"}, {"uuid": "7780b956-4516-4aba-a8a3-e4197e6e2931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvb4dgcxp2k", "content": "", "creation_timestamp": "2025-01-29T15:14:40.599843Z"}, {"uuid": "7ccb83ae-f6b2-4a17-995f-4b0e419b4fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqznqkhv2n", "content": "", "creation_timestamp": "2025-01-27T20:16:09.937934Z"}, {"uuid": "ab490fcc-ead6-43e7-8792-2719cb85668a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lhgnugnprw2b", "content": "", "creation_timestamp": "2025-02-05T13:18:08.218525Z"}, {"uuid": "d3c0ce93-e6aa-43b9-a639-63864fd0ccb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902363379966395", "content": "", "creation_timestamp": "2025-01-27T21:08:57.440732Z"}, {"uuid": "15503bf2-3855-4b1e-b849-bc053839fbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqudx7npa2e", "content": "", "creation_timestamp": "2025-01-27T21:15:36.878734Z"}, {"uuid": "e70f93a9-0f40-4935-b6ed-66216d2326ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://daniel.haxx.se/blog/2025/02/05/curl-8-12-0/", "content": "", "creation_timestamp": "2025-02-05T07:24:03.000000Z"}, {"uuid": "1e44c871-bd70-425c-97ac-ea683e3f8168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908135060417840", "content": "", "creation_timestamp": "2025-01-28T21:36:46.024043Z"}, {"uuid": "c924ce6b-4091-44f7-bffb-ac8b354bbdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0786", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908260950957996", "content": "", "creation_timestamp": "2025-01-28T22:08:46.951940Z"}, {"uuid": "15257b50-e7a2-4554-b308-fb38789848ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0787", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908260986433585", "content": "", "creation_timestamp": "2025-01-28T22:08:47.394054Z"}, {"uuid": "7be8066c-3ddb-48d2-8152-befe9031f7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6h6qcl2n", "content": "", "creation_timestamp": "2025-01-28T22:15:46.632381Z"}, {"uuid": "6755e39b-fa53-4ba5-bda8-0ee7af7d4558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0786", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6jyhbu2e", "content": "", "creation_timestamp": "2025-01-28T22:15:49.333686Z"}, {"uuid": "3c0eb869-4492-47b8-a386-b988d7a9fea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0787", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6mjuyo2t", "content": "", "creation_timestamp": "2025-01-28T22:15:51.958903Z"}, {"uuid": "0f4a33e2-ef2f-4325-8401-ce8f83853395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0736", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905214820626829", "content": "", "creation_timestamp": "2025-01-28T09:14:06.759882Z"}, {"uuid": "3fd4a943-b381-441d-97a7-8d91881e4c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0788", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908366281496081", "content": "", "creation_timestamp": "2025-01-28T22:35:34.906684Z"}, {"uuid": "73547ab0-b73c-47b9-ac24-0d705c976b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0736", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs4ln7qoh2c", "content": "", "creation_timestamp": "2025-01-28T09:15:44.305324Z"}, {"uuid": "3fbbc096-4156-4945-8861-f47d13f2b4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0799", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113954125885259878", "content": "", "creation_timestamp": "2025-02-06T00:32:50.053860Z"}, {"uuid": "609a08ec-23c7-4c2a-9630-cf25a252eac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905286642577746", "content": "", "creation_timestamp": "2025-01-28T09:32:22.486875Z"}, {"uuid": "e9b45bef-c976-493d-8618-0a66f2c11ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905286658170629", "content": "", "creation_timestamp": "2025-01-28T09:32:22.758803Z"}, {"uuid": "89970086-1a64-4380-ba98-9b8e42feb959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905315484441568", "content": "", "creation_timestamp": "2025-01-28T09:39:42.597789Z"}, {"uuid": "2fc37726-d007-40c9-a1ee-ebfdf33c185d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/xeiaso.net/post/3lhgvtxq3np2t", "content": "", "creation_timestamp": "2025-02-05T15:41:02.280263Z"}, {"uuid": "465ac501-dfaa-4a51-926a-35062aaf18de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0799", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhvxubhis2t", "content": "", "creation_timestamp": "2025-02-06T01:15:52.367398Z"}, {"uuid": "375c7606-65fe-4bf4-8e07-f1ba1d8a4a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3lhgvxhs3ffd2", "content": "", "creation_timestamp": "2025-02-05T15:43:45.224293Z"}, {"uuid": "9a89cf5c-086b-473d-9996-6b6a20a58dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wtjv2f2p", "content": "", "creation_timestamp": "2025-01-28T10:15:41.561504Z"}, {"uuid": "8dd721dc-5ea3-43a3-a61e-f15f942c6ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wvtnjr2r", "content": "", "creation_timestamp": "2025-01-28T10:15:43.722381Z"}, {"uuid": "f9ddb09e-fc34-4039-b6f1-c597767335dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0789", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908496261938946", "content": "", "creation_timestamp": "2025-01-28T23:08:38.097730Z"}, {"uuid": "06955b64-9702-4acc-aef0-fe99180b97e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wy2a6k2i", "content": "", "creation_timestamp": "2025-01-28T10:15:46.800732Z"}, {"uuid": "c41eaf51-70ef-451e-b564-fe2504d8f2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl723dod2r", "content": "", "creation_timestamp": "2025-01-28T23:09:48.613293Z"}, {"uuid": "e3f12343-2e6f-4b96-adc8-4cde7c553efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72jk4h2g", "content": "", "creation_timestamp": "2025-01-28T23:09:51.126153Z"}, {"uuid": "66157dfd-3f03-4ae9-9ff3-38b5ce0c751a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0788", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtljb6l5a2c", "content": "", "creation_timestamp": "2025-01-28T23:15:30.504299Z"}, {"uuid": "d206a695-46eb-4c89-b344-87848f70275e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0789", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtljel6e52i", "content": "", "creation_timestamp": "2025-01-28T23:15:34.200104Z"}, {"uuid": "d61be96d-4dfa-415f-85e3-0e45c6565392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0790", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908591627541918", "content": "", "creation_timestamp": "2025-01-28T23:32:52.569682Z"}, {"uuid": "2d26046f-fe96-41ee-a67f-f51c6501a19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908591643575404", "content": "", "creation_timestamp": "2025-01-28T23:32:52.894722Z"}, {"uuid": "65ed234c-b519-4433-a018-12f317a359b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0792", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908735047762799", "content": "", "creation_timestamp": "2025-01-29T00:09:21.073270Z"}, {"uuid": "63bf7405-f3d1-452e-8268-d539eacdae28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0790", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtouguuqk2h", "content": "", "creation_timestamp": "2025-01-29T00:15:27.348447Z"}, {"uuid": "cc5bad59-071b-4bc0-94ce-1838552deeee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtoujqmpn2f", "content": "", "creation_timestamp": "2025-01-29T00:15:29.825784Z"}, {"uuid": "2bd6a58a-340a-4161-94d8-22ee61ce56cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0792", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtovsgvug2n", "content": "", "creation_timestamp": "2025-01-29T00:16:12.429260Z"}, {"uuid": "4e2d46ec-9011-4451-bca3-2eef75b49de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908830776338252", "content": "", "creation_timestamp": "2025-01-29T00:33:41.656197Z"}, {"uuid": "24415823-7555-4e6f-bdcb-dbbf495493c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908830791450336", "content": "", "creation_timestamp": "2025-01-29T00:33:42.017868Z"}, {"uuid": "cb6d45da-1759-4a0f-86ae-f734464ca055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5s7uo2y", "content": "", "creation_timestamp": "2025-01-28T13:05:23.600909Z"}, {"uuid": "52813818-e92c-41c9-ae00-cfbd1157707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgts7pq26w2c", "content": "", "creation_timestamp": "2025-01-29T01:15:26.679730Z"}, {"uuid": "fa9e117c-fd24-4880-adeb-9b4ff2f9bccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgts7sd4ha2r", "content": "", "creation_timestamp": "2025-01-29T01:15:29.192815Z"}, {"uuid": "201b6f41-28b4-4df6-b041-6f668cff7587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909056976493967", "content": "", "creation_timestamp": "2025-01-29T01:31:13.635276Z"}, {"uuid": "d4762b98-1576-493f-b2a0-c957c695fc97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909056961861414", "content": "", "creation_timestamp": "2025-01-29T01:31:13.177459Z"}, {"uuid": "9f6c82e8-a66d-4cdd-9e89-353206967555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0700", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884431687195322", "content": "", "creation_timestamp": "2025-01-24T17:08:41.145857Z"}, {"uuid": "3644724d-417b-4681-af78-ae00ae77e27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5ou5f2g", "content": "", "creation_timestamp": "2025-01-28T13:05:23.015644Z"}, {"uuid": "e6100931-3cb6-47a9-8864-cd30f2e61ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113909183271515265", "content": "", "creation_timestamp": "2025-01-29T02:03:20.346347Z"}, {"uuid": "0b6c7ee6-5d38-440a-a98c-37ee0b799c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0701", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884431703369446", "content": "", "creation_timestamp": "2025-01-24T17:08:41.366887Z"}, {"uuid": "537a6057-673b-4cac-b7cf-3f8ecbde32d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113912663006799887", "content": "", "creation_timestamp": "2025-01-29T16:48:27.297586Z"}, {"uuid": "09b261d3-fb2c-4fe4-ac69-0dd3833cc5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg647qz2g", "content": "", "creation_timestamp": "2025-01-28T13:05:25.328516Z"}, {"uuid": "273b620f-97b8-4312-8fff-a08475840ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlmtjnj2r", "content": "", "creation_timestamp": "2025-01-29T02:15:47.158419Z"}, {"uuid": "da485f14-594a-4d29-8834-50437d8369c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlp4raq2h", "content": "", "creation_timestamp": "2025-01-29T02:15:49.880392Z"}, {"uuid": "855bbbbf-1a6c-4fe6-a9d6-f076dd98a2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtvlrh6i62f", "content": "", "creation_timestamp": "2025-01-29T02:15:52.289498Z"}, {"uuid": "14f2ee86-9273-4ad5-a4df-c262fcf56574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvinyjy2k", "content": "", "creation_timestamp": "2025-01-29T03:14:59.630186Z"}, {"uuid": "b9e32434-fba6-4c8a-a2a6-6e981549eef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvixebf2e", "content": "", "creation_timestamp": "2025-01-29T03:15:00.247944Z"}, {"uuid": "ba8c2e4d-8bcc-4042-a181-0a188a3e6d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0720", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113897168658571421", "content": "", "creation_timestamp": "2025-01-26T23:07:51.840336Z"}, {"uuid": "3d348068-a92d-468a-9885-817dd64dcc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvjfyuh2h", "content": "", "creation_timestamp": "2025-01-29T03:15:02.747807Z"}, {"uuid": "3a00b514-fca0-4f5a-b420-2135bccb281e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0720", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgoklryujy2n", "content": "", "creation_timestamp": "2025-01-26T23:15:42.959788Z"}, {"uuid": "b966b4b7-441d-49a5-912e-5c8896bded6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113897283015573343", "content": "", "creation_timestamp": "2025-01-26T23:36:56.872886Z"}, {"uuid": "3f439ddc-d74f-4ded-b4bf-28ff78631847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113897283030696606", "content": "", "creation_timestamp": "2025-01-26T23:36:57.187571Z"}, {"uuid": "f4b0257d-2406-4cab-8116-cb8e96ce794e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvjqmt52b", "content": "", "creation_timestamp": "2025-01-29T03:15:04.572458Z"}, {"uuid": "1d7cc6f2-61ef-432a-93e6-27bfcbf26532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvju7lh2q", "content": "", "creation_timestamp": "2025-01-29T03:15:05.232283Z"}, {"uuid": "13ea5c15-5bcd-4e9c-be24-79b48033ce97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgonxmffeu2t", "content": "", "creation_timestamp": "2025-01-27T00:16:01.285179Z"}, {"uuid": "5a04871b-e77a-4ef9-9590-0805da6de6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeajuefg2h", "content": "", "creation_timestamp": "2025-01-30T11:16:00.292405Z"}, {"uuid": "1e2ced3d-c525-4c2c-8082-704bce16ddd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgonxpdke22e", "content": "", "creation_timestamp": "2025-01-27T00:16:04.361645Z"}, {"uuid": "8d44b744-9617-42a6-9893-793d8a6f6ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvk4r3x2u", "content": "", "creation_timestamp": "2025-01-29T03:15:06.437690Z"}, {"uuid": "b4cf5fbb-e211-4470-ad62-67e3cc2e2b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvkb6mi2y", "content": "", "creation_timestamp": "2025-01-29T03:15:07.095227Z"}, {"uuid": "f3f36b23-9fc6-465b-9871-b16b129394c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeahbg3w2h", "content": "", "creation_timestamp": "2025-01-30T11:15:57.679785Z"}, {"uuid": "73da5655-e3de-421e-a154-fe2920ca6814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeamhmyh2f", "content": "", "creation_timestamp": "2025-01-30T11:16:03.109971Z"}, {"uuid": "90d04669-6745-465f-88b6-2cab60d3b32c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvkka5v2b", "content": "", "creation_timestamp": "2025-01-29T03:15:08.448856Z"}, {"uuid": "892e7632-259c-4ce0-a397-de92c658f148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvkvewh2g", "content": "", "creation_timestamp": "2025-01-29T03:15:10.254308Z"}, {"uuid": "79a3724f-df5e-4238-869e-e95d6b2e915a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgowayqver2r", "content": "", "creation_timestamp": "2025-01-27T02:44:25.710860Z"}, {"uuid": "10c3251d-1ec3-4e4f-a042-a7a6b4df27fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgowaz2x2725", "content": "", "creation_timestamp": "2025-01-27T02:44:26.566147Z"}, {"uuid": "6faee700-4d8a-4e05-9da4-328162fb41b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgowaz6jwg2k", "content": "", "creation_timestamp": "2025-01-27T02:44:27.123068Z"}, {"uuid": "f4148786-bbac-403d-9073-e351ee3c7c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113909832780496052", "content": "", "creation_timestamp": "2025-01-29T04:48:31.601728Z"}, {"uuid": "76de7d0e-5ba4-414e-b682-47c83a0574e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917075538444909", "content": "", "creation_timestamp": "2025-01-30T11:30:26.776459Z"}, {"uuid": "01112656-e616-4daf-af13-b357ce2de243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917075587379126", "content": "", "creation_timestamp": "2025-01-30T11:30:27.507668Z"}, {"uuid": "34a4db33-a88c-4167-8419-2be6e6c36c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917075552632233", "content": "", "creation_timestamp": "2025-01-30T11:30:26.929933Z"}, {"uuid": "0f77fe5d-0ed2-4b0e-b880-156049f6c30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://hackerone.com/reports/2956023", "content": "", "creation_timestamp": "2025-02-05T18:16:16.644174Z"}, {"uuid": "da8c3be3-927b-4339-92bf-92dedc0fb014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlxtu2s2j", "content": "", "creation_timestamp": "2025-01-30T12:16:05.341824Z"}, {"uuid": "1eeef040-d06b-400e-8dfe-87008eb4973e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm4k77n2n", "content": "", "creation_timestamp": "2025-01-30T12:16:10.180221Z"}, {"uuid": "d4142a17-c446-4c67-a150-2c2be6734629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlswlhn2n", "content": "", "creation_timestamp": "2025-01-30T12:16:00.378433Z"}, {"uuid": "ff8c5358-431a-4ecd-870c-73bcf40556e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlvhjlw27", "content": "", "creation_timestamp": "2025-01-30T12:16:02.788687Z"}, {"uuid": "a4dcde7a-5627-4e25-8d0c-e559ad45dd18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm26rjk2j", "content": "", "creation_timestamp": "2025-01-30T12:16:07.873570Z"}, {"uuid": "67259cb2-cc09-4237-93e3-45365e7b3033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm6qxgx2b", "content": "", "creation_timestamp": "2025-01-30T12:16:12.572348Z"}, {"uuid": "42f32bdb-7357-4762-ad05-a313369c1fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113917383401999556", "content": "", "creation_timestamp": "2025-01-30T12:55:23.264168Z"}, {"uuid": "db343c90-93b1-40f2-9174-f11c73c6200f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://mastodon.social/@bagder/113951551552321815", "content": "", "creation_timestamp": "2025-02-05T18:16:59.514326Z"}, {"uuid": "2e89596e-e968-4a39-ad0f-7997debdceb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113917383559471730", "content": "", "creation_timestamp": "2025-01-30T12:59:36.292881Z"}, {"uuid": "ed860ebc-80a2-4090-abee-5600cdf5726d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113910615370471519", "content": "", "creation_timestamp": "2025-01-29T08:07:32.356327Z"}, {"uuid": "a686658e-f4e0-47b1-862d-6f49fbba3e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0730", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901391029951579", "content": "", "creation_timestamp": "2025-01-27T17:01:40.302730Z"}, {"uuid": "22769bb0-d34c-4f8c-8dc5-7ff68348c0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0729", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901391015002093", "content": "", "creation_timestamp": "2025-01-27T17:01:40.492823Z"}, {"uuid": "3c7b2d31-a18b-48e0-911a-8e51f7b5c661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113906977252648842", "content": "", "creation_timestamp": "2025-01-28T16:42:19.278788Z"}, {"uuid": "30a874a0-d774-4f2c-b2be-0e4ed74eda6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0729", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxxhgkp2e", "content": "", "creation_timestamp": "2025-01-27T17:16:16.063030Z"}, {"uuid": "13faece7-af02-414b-8e64-b82a6fcd01c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0730", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgy3e5dy2t", "content": "", "creation_timestamp": "2025-01-27T17:16:19.930935Z"}, {"uuid": "098cbd18-9219-4047-951c-0526483ac75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0732", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901655181212455", "content": "", "creation_timestamp": "2025-01-27T18:08:50.833555Z"}, {"uuid": "7fff1e89-bd1a-4231-a209-d2e44e58cd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0733", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901655195916696", "content": "", "creation_timestamp": "2025-01-27T18:08:50.981393Z"}, {"uuid": "0f84d6c0-76a9-4363-b61d-d9d7a96738e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0732", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkcvozyd2t", "content": "", "creation_timestamp": "2025-01-27T18:16:04.295363Z"}, {"uuid": "386cd305-36d7-4d5e-b16e-f194df549afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0733", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkcym4xp2j", "content": "", "creation_timestamp": "2025-01-27T18:16:07.207931Z"}, {"uuid": "07772aee-c58d-49a8-9c1a-aaab3f45eea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0783", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113907442861164477", "content": "", "creation_timestamp": "2025-01-28T18:40:43.808747Z"}, {"uuid": "b7f254de-6228-4b35-959f-d6add872abb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsxgfptvk2h", "content": "", "creation_timestamp": "2025-01-28T17:15:59.676477Z"}, {"uuid": "a357e2f8-4b3d-4117-bc47-4af2f6a5f924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113907476089662896", "content": "", "creation_timestamp": "2025-01-28T18:49:16.351751Z"}, {"uuid": "1fa22bb1-f58a-4ed0-8149-fb02e815ae87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113917854232361806", "content": "", "creation_timestamp": "2025-01-30T14:48:28.873217Z"}, {"uuid": "409f1db8-3e7d-4dcb-ae6d-490156b9a083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114183612052741803", "content": "", "creation_timestamp": "2025-03-18T13:14:11.312193Z"}, {"uuid": "cb419b0b-6073-4aef-9e06-2523212ccad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3lksqq363vmu2", "content": "", "creation_timestamp": "2025-03-20T12:57:23.709159Z"}, {"uuid": "fff43f38-ef69-4276-96b2-c04516744a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0724", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114204744366284573", "content": "", "creation_timestamp": "2025-03-22T06:48:25.046805Z"}, {"uuid": "19d8ef59-a0c9-4db6-ab6c-10daa16be838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uxpohl2s", "content": "", "creation_timestamp": "2025-03-22T07:38:43.897831Z"}, {"uuid": "8ab11c82-8734-43a0-9729-383ddccaf9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uxywvq2w", "content": "", "creation_timestamp": "2025-03-22T07:38:44.532409Z"}, {"uuid": "ef5f6550-b6ee-4861-b976-c52f2fca1abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uycx7g2x", "content": "", "creation_timestamp": "2025-03-22T07:38:46.086305Z"}, {"uuid": "fe6fe5ac-f72a-49c5-bd76-be939b41578e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkzy6ulpsw2h", "content": "", "creation_timestamp": "2025-03-23T09:59:06.962068Z"}, {"uuid": "ff35b886-be1d-4b5e-b91c-0af914307634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114119101325685363", "content": "", "creation_timestamp": "2025-03-07T03:48:15.681219Z"}, {"uuid": "1a538adc-b455-4429-bfdd-80bc3788b7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114182802939948930", "content": "", "creation_timestamp": "2025-03-18T09:48:25.628859Z"}, {"uuid": "d8668026-b3f2-4a3b-aeb5-79d91576fa5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liepxtvbbk2t", "content": "", "creation_timestamp": "2025-02-17T12:15:42.363938Z"}, {"uuid": "10347e02-f03d-42a9-a7f6-dadf05bcc274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liezyxcd4i2a", "content": "", "creation_timestamp": "2025-02-17T15:15:21.683617Z"}, {"uuid": "a6215763-a8a9-4b89-b6db-ad6aa8cf3fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0796", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj2fvrvu2y", "content": "", "creation_timestamp": "2025-02-18T05:17:11.232401Z"}, {"uuid": "84e839ad-3b0a-45c6-ab02-f16e1b6360f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ligqt4fxrn2m", "content": "", "creation_timestamp": "2025-02-18T07:36:16.634660Z"}, {"uuid": "5b0c5cfe-d52e-4a58-89b1-09adb4df839f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddpoqfo2s", "content": "", "creation_timestamp": "2025-03-07T05:59:29.861945Z"}, {"uuid": "694a91af-2e9d-420e-9e2a-c627f6d536d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddq4pfc2o", "content": "", "creation_timestamp": "2025-03-07T05:59:31.099085Z"}, {"uuid": "4408f877-eef6-4129-9266-f86861c6f1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://o0o.social/users/patrick/statuses/114035649272501834", "content": "", "creation_timestamp": "2025-02-20T13:45:12.667588Z"}, {"uuid": "f4b66487-ff21-4c87-9df8-b0c3fa9c7ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liop3rgr4g2p", "content": "", "creation_timestamp": "2025-02-21T11:26:37.458389Z"}, {"uuid": "ed4a9a89-a9ce-4dfc-a74d-8a9005c83880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liop3sdzul2p", "content": "", "creation_timestamp": "2025-02-21T11:26:38.177784Z"}, {"uuid": "e6e1de5e-7410-4b9f-b135-f62a23e721f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0731", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-04", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "41e365e2-9edc-4b70-9cf6-5226470eedc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj2g475xfh2s", "content": "", "creation_timestamp": "2025-02-26T03:17:46.034618Z"}, {"uuid": "7585df21-793a-4290-aac7-e6ec3742157d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0760", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lj2zskgfys2y", "content": "", "creation_timestamp": "2025-02-26T09:10:19.359989Z"}, {"uuid": "fa958623-14c8-4082-a04d-48d171f04f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lknn33u4v42e", "content": "", "creation_timestamp": "2025-03-18T12:08:10.643678Z"}, {"uuid": "df8b94f2-b681-4059-b489-ee98f2487dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2zzvb24", "content": "", "creation_timestamp": "2025-03-25T08:49:29.695078Z"}, {"uuid": "364c172d-23a8-4b89-ac89-db270096c176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0731", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3llgp2ip3ko2u", "content": "", "creation_timestamp": "2025-03-28T11:20:12.316095Z"}, {"uuid": "3d9ada1e-8ea3-4e55-a17f-6ecfebe4f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lm3rjcfk5b2f", "content": "", "creation_timestamp": "2025-04-05T20:30:12.621448Z"}, {"uuid": "a0192cbf-b814-4e08-b98c-c7cae7508100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "https://infosec.place/objects/e33c10e0-6bba-414c-bef3-74aea48d157a", "content": "", "creation_timestamp": "2025-04-14T14:00:05.762043Z"}, {"uuid": "f6639474-70ed-4c89-8629-8e2a0a8a37aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "https://infosec.place/objects/e13629f6-a9f6-4003-b74e-14e535bdc612", "content": "", "creation_timestamp": "2025-04-14T14:00:11.314402Z"}, {"uuid": "5b234346-077d-45d8-9531-7cefea841182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://infosec.place/objects/73e4b60c-da54-4219-8066-96648096b35b", "content": "", "creation_timestamp": "2025-04-14T14:00:16.914391Z"}, {"uuid": "4ae4d51e-17d3-4df0-91b6-fc13292e8830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lms2jufbwh2y", "content": "", "creation_timestamp": "2025-04-14T17:10:07.300912Z"}, {"uuid": "95f749ba-12fb-48d7-acdf-68bb71a4a8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lms2jufbwh2y", "content": "", "creation_timestamp": "2025-04-14T17:10:07.484267Z"}, {"uuid": "d5bcf544-d042-4d7b-af69-9b044e3d9736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lms2jufbwh2y", "content": "", "creation_timestamp": "2025-04-14T17:10:07.630533Z"}, {"uuid": "5e9aa89c-41b8-4492-91ae-b2b6fe438860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114350548547803347", "content": "", "creation_timestamp": "2025-04-17T00:48:20.088581Z"}, {"uuid": "2a47bce0-3600-4a49-8570-af4a1ec16385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy2o5ujvb24", "content": "", "creation_timestamp": "2025-04-17T02:28:29.625179Z"}, {"uuid": "03a52cdd-5b22-47ff-98a9-0642948d6b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rwz72f2h", "content": "", "creation_timestamp": "2025-04-17T02:48:30.798048Z"}, {"uuid": "be5bfcc4-1cfb-4d1b-9713-4e9e8468316c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rxwhzt2d", "content": "", "creation_timestamp": "2025-04-17T02:48:35.810630Z"}, {"uuid": "07a54f2a-cc4e-44ca-8843-50021299051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114353515688216436", "content": "", "creation_timestamp": "2025-04-17T13:22:55.134562Z"}, {"uuid": "c8282ae9-7de4-4d8b-a388-6beb877f51cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://mastodon.social/users/bagder/statuses/114389539878135652", "content": "", "creation_timestamp": "2025-04-23T22:04:26.503223Z"}, {"uuid": "49afba6c-56a1-410a-bcec-cd0462dce752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lnsgl5xgoh27", "content": "", "creation_timestamp": "2025-04-27T14:10:47.410901Z"}, {"uuid": "1479f51d-fc01-4c48-8c1c-edcf4d6b172e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114422334870286344", "content": "", "creation_timestamp": "2025-04-29T17:04:33.870538Z"}, {"uuid": "57fddd73-cda2-4a43-9f33-48c1d358eedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2ijvzjz2k", "content": "", "creation_timestamp": "2025-04-29T19:50:33.096468Z"}, {"uuid": "6745c469-d99e-4b05-9e22-1d34cfe75171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0782", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7oydu6t3t2", "content": "", "creation_timestamp": "2025-05-02T20:46:07.631743Z"}, {"uuid": "cf4827c3-6373-4ef9-a82b-a3c2edc06413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7zvpfapd2n", "content": "", "creation_timestamp": "2025-05-03T00:01:21.218048Z"}, {"uuid": "87724be8-0157-4148-b63b-2c5ed4e2f384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "6eb83454-e272-42b7-9955-2fbd49c5ca40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrluq2g26", "content": "", "creation_timestamp": "2025-10-16T21:02:40.750644Z"}, {"uuid": "adf2a6f3-ad51-4f63-b919-569d4bc5b9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:29.000000Z"}, {"uuid": "1a3a5ffc-941e-4af7-9fbd-6dc2267c837d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0764", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "83f02a47-bf47-48a0-8e17-f99e0c8d99e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0719", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "0783dd12-8276-470a-85f2-fd76b6820ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0760", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "946f136b-815f-4112-8328-abf8880a72f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0767", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "426883e0-7afe-4bd4-9386-1c1cbd4570fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0759", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "89963aaa-a15f-4419-8986-0bb593a22157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f22ce17d-8ca4-4b82-81b0-a1a4bc468b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "1a3d98f4-59dd-44e0-8096-842f4102e4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "47e8981a-f6e1-4b87-aa9a-707bf6f54405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:20.000000Z"}, {"uuid": "7f9fbaa5-54d5-4d84-a698-67638c859881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "b91b01cd-033d-4460-8c42-8362817c60a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "ba6a5a80-9938-4496-869f-46935a689fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "2dbab668-fb07-4ad1-bfc1-fc93eb3272cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "89b7a245-8763-40c8-89a2-3d3e53dda70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "3266c1c3-2ee8-409d-b93d-f8052f8f16e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "6509667d-5c36-423c-9286-77c267b3ec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "f7a26c63-3767-4616-b798-228ce3a4a8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "eace2e50-eb0f-4dc1-89cc-c8752b9492bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "af2e9531-19bd-4c44-b361-547a06bbda1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/konard/4ec7b610dd306e207cf0feb93587dfed", "content": "", "creation_timestamp": "2025-12-30T15:44:52.000000Z"}, {"uuid": "ba10a44f-e61c-4d37-86fa-b74fe0631cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511", "content": "", "creation_timestamp": "2026-01-14T18:54:12.000000Z"}, {"uuid": "08fd1104-763f-4bc8-b7d6-8a9f185950d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7t3sw23", "content": "", "creation_timestamp": "2026-01-16T18:05:06.625608Z"}, {"uuid": "d39b9673-6d32-44eb-941d-1177823cea7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7ulkz2y", "content": "", "creation_timestamp": "2026-01-16T18:05:07.151247Z"}, {"uuid": "6b65cf4f-08de-4c6b-ad63-a7c460bc7223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0799", "type": "seen", "source": "https://t.me/cvedetector/17357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0799 - IBM App Connect Enterprise Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0799 \nPublished : Feb. 6, 2025, 1:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : IBM App Connect enterprise\u00a012.0.1.0 through 12.0.12.10 and\u00a013.0.1.0 through 13.0.2.1\u00a0could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T03:31:17.000000Z"}, {"uuid": "e3e6f558-5ad7-432e-b6ff-63184d001dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://t.me/cvedetector/18255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0714 - MobaXterm Static IV Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0714 \nPublished : Feb. 17, 2025, 12:15 p.m. | 30\u00a0minutes ago \nDescription : The vulnerability existed in the password storage of Mobateks MobaXterm below 25.0.  \nMobaXTerm uses an initialization vector (IV) that is generated by encrypting null bytes with a derivate of the users master key. As both the master key is static, and AES ECB produces the same output with the same input the IV for AES CFB is always the same.The static IV makes it easier to obtain sensitive information and decrypt data if the data is stored at rest. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-17T14:02:22.000000Z"}, {"uuid": "fbee1173-3b14-4fac-b8a3-7210b271c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://t.me/cvedetector/19774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0749 - Homey WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0749 \nPublished : March 7, 2025, 2:15 a.m. | 33\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T04:03:58.000000Z"}, {"uuid": "a4f5fe4d-3d97-4cb2-b4ef-cbe32fae7413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://t.me/cvedetector/19773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0748 - Homey WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0748 \nPublished : March 7, 2025, 2:15 a.m. | 33\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T04:03:58.000000Z"}, {"uuid": "44a452a0-f684-417f-a625-59f428c93c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "7c765ec8-05b6-4cf5-bb53-4fcee40bce0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0705", "type": "seen", "source": "https://t.me/cvedetector/16338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0705 - JoeyBling Bootplus QRCode Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0705 \nPublished : Jan. 24, 2025, 7:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:06:16.000000Z"}, {"uuid": "09fac707-f466-4393-a9c5-34d4343fbb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "https://t.me/cvedetector/18639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0726 - Eclipse ThreadX NetX Duo HTTP Server Denial of Service (DoS)\", \n  \"Content\": \"CVE ID : CVE-2025-0726 \nPublished : Feb. 21, 2025, 8:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.2, an attacker can cause a denial of service by specially   \ncrafted packets. The core issue is missing closing of a file in case of   \nan error condition, resulting in the 404 error for each further file   \nrequest. Users can work-around the issue by disabling the PUT request   \nsupport. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T11:25:06.000000Z"}, {"uuid": "e0644e0e-b38a-48d6-9194-fb6026e71bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "https://t.me/cvedetector/18638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0727 - Apache NetX HTTP Server Denial of Service Integer Underflow\", \n  \"Content\": \"CVE ID : CVE-2025-0727 \nPublished : Feb. 21, 2025, 9:15 a.m. | 57\u00a0minutes ago \nDescription : In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.2, an attacker can cause an integer underflow and a   \nsubsequent denial of service by writing a very large file, by specially   \ncrafted packets with Content-Length in one packet smaller than the data   \nrequest size of the other packet. A possible workaround is to disable   \nHTTP PUT support. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T11:25:05.000000Z"}, {"uuid": "ac2bc02d-0f85-4a38-9a1d-17dab22fb013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://t.me/cvedetector/18637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0728 - Eclipse ThreadX NetX Duo HTTP Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-0728 \nPublished : Feb. 21, 2025, 9:15 a.m. | 57\u00a0minutes ago \nDescription : In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.2, an attacker can cause an integer underflow and a   \nsubsequent denial of service by writing a very large file, by specially   \ncrafted packets with Content-Length smaller than the data request size. A  \n possible workaround is to disable HTTP PUT support. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T11:25:05.000000Z"}, {"uuid": "983cb351-7782-4f35-83e9-adb98685fdaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0706", "type": "seen", "source": "https://t.me/cvedetector/16346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0706 - JoeyBling Bootplus Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0706 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:29.000000Z"}, {"uuid": "daf5ee94-07db-4cd5-971b-dcb070e18ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0708", "type": "seen", "source": "https://t.me/cvedetector/16342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0708 - \"Fumiao OpenCms Cross Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0708 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument \u6a21\u677f\u524d\u7f00 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:23.000000Z"}, {"uuid": "55bb1a17-fe9f-46b8-9f22-21e009ca1b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0707", "type": "seen", "source": "https://t.me/cvedetector/16341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0707 - Rise Group Rise Mode Temp CPU Local Untrusted Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0707 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:22.000000Z"}, {"uuid": "4e159ebb-02d8-4555-922b-c7d149758a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0796", "type": "seen", "source": "https://t.me/cvedetector/18282", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0796 - WordPress Mortgage Lead Capture System CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0796 \nPublished : Feb. 18, 2025, 5:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Mortgage Lead Capture System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.2.10. This is due to missing or incorrect nonce validation on the 'wprequal_reset_defaults' action. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T09:16:51.000000Z"}, {"uuid": "2e9037b0-3825-433a-b52c-bafe4777307a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0764", "type": "seen", "source": "https://t.me/cvedetector/19125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0764 - \"wpForo WordPress Arbitrary File Read Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0764 \nPublished : Feb. 28, 2025, 7:15 a.m. | 46\u00a0minutes ago \nDescription : The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'update' method of the 'Members' class in all versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with subscriber-level privileges or higher, to read arbitrary files on the server. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T09:29:57.000000Z"}, {"uuid": "87af1f1b-d622-43f1-be1f-ab8d48386c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/cvedetector/17285", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0725 - Apache libcurl integer overflow vulnerability boils down to buffer overflow\", \n  \"Content\": \"CVE ID : CVE-2025-0725 \nPublished : Feb. 5, 2025, 10:15 a.m. | 1\u00a0hour, 36\u00a0minutes ago \nDescription : When libcurl is asked to perform automatic gzip decompression of  \ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,  \n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would  \nmake libcurl perform a buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T13:17:56.000000Z"}, {"uuid": "a42c3774-c59d-40b1-bd73-b79bac643d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0769", "type": "seen", "source": "https://t.me/cvedetector/19193", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0769 - PixelYourSite PHP Unvalidated User Input Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0769 \nPublished : Feb. 28, 2025, 8:15 p.m. | 2\u00a0hours, 24\u00a0minutes ago \nDescription : PixelYourSite - Your smart PIXEL (TAG) and API Manager 10.1.1.1 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/modules/facebook/facebook-server-a sync-task.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T23:43:27.000000Z"}, {"uuid": "5ccb3a27-c536-4afd-b834-9fa12a13c33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0760", "type": "seen", "source": "https://t.me/cvedetector/18938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0760 - Zimbra Email Server Unencrypted SMTP Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-0760 \nPublished : Feb. 26, 2025, 12:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T03:25:04.000000Z"}, {"uuid": "1cd38b8c-cf34-4baf-8cfe-d3ff6962f1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0767", "type": "seen", "source": "https://t.me/cvedetector/19068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0767 - WordPress Activity Log Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0767 \nPublished : Feb. 27, 2025, 7:15 p.m. | 21\u00a0minutes ago \nDescription : WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T20:56:14.000000Z"}, {"uuid": "3e86a7e4-ac1e-4b45-a1f1-5d15a04b323f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0710", "type": "seen", "source": "https://t.me/cvedetector/16348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0710 - CampCodes School Management Software Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0710 \nPublished : Jan. 24, 2025, 9:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T22:46:38.000000Z"}, {"uuid": "2f5c0374-cdcb-418f-847f-269abd4971b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0709", "type": "seen", "source": "https://t.me/cvedetector/16347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0709 - Dcat-Admin Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0709 \nPublished : Jan. 24, 2025, 9:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Roles Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T22:46:37.000000Z"}, {"uuid": "c48db123-c0fe-4cb5-a0e5-3a545c03f049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0704", "type": "seen", "source": "https://t.me/cvedetector/16337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0704 - JoeyBling Bootplus QrCodeController w/h Resource Consumption Remote DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0704 \nPublished : Jan. 24, 2025, 7:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:06:16.000000Z"}, {"uuid": "ac5c882a-fc26-4a1f-a983-ebb6a2b4269c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0703", "type": "seen", "source": "https://t.me/cvedetector/16336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0703 - JoeyBling Bootplus Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0703 \nPublished : Jan. 24, 2025, 7:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:06:15.000000Z"}, {"uuid": "14d49785-180f-4531-a600-24f6a1e6eb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0701", "type": "seen", "source": "https://t.me/cvedetector/16314", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0701 - JoeyBling Bootplus SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0701 \nPublished : Jan. 24, 2025, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the file /admin/sys/user/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T19:25:43.000000Z"}, {"uuid": "d479a524-e892-459f-a724-787ec48d84ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0700", "type": "seen", "source": "https://t.me/cvedetector/16313", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0700 - JoeyBling Bootplus SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0700 \nPublished : Jan. 24, 2025, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/sys/log/list. The manipulation of the argument logId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T19:25:42.000000Z"}, {"uuid": "9ba4994b-6fa9-4ffb-b6c3-3d447711bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "Telegram/WbW5s21pKEBDtIiSv6GpyJP2joIwE1UmbnyPnIaK2uZmw7gS", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "e3847d21-3e43-4433-894e-d273ae5e06f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "Telegram/kK6lmzK_UF0Rhr6IZUgSQL2n6P0B2KjZhbwrC7DHTrrGFzMI", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "d8d87636-be6d-4790-886e-d1d3f878ebec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0764", "type": "seen", "source": "Telegram/JXGa4J3nrHuDtXcYvu10cMAXBkMdNjfYGh5Vi79lKhBWGmBy", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "f54533ff-a30e-40a2-8f2a-981b3dfae2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3355", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0795\n\ud83d\udd25 CVSS Score: 3.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T03:31:48Z\n\ud83d\udccf Modified: 2025-01-29T03:31:48Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0795\n2. https://github.com/Rain1er/report/blob/main/CDG/todolistjump.md\n3. https://vuldb.com/?ctiid.293919\n4. https://vuldb.com/?id.293919\n5. https://vuldb.com/?submit.483349", "creation_timestamp": "2025-01-29T04:09:53.000000Z"}, {"uuid": "408b7563-93d5-483a-b6b1-29934ee55fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0703\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-01-24T18:31:06.470Z\n\ud83d\udccf Modified: 2025-01-24T20:59:02.283Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293231\n2. https://vuldb.com/?ctiid.293231\n3. https://vuldb.com/?submit.480842\n4. https://github.com/JoeyBling/bootplus/issues/25\n5. https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618", "creation_timestamp": "2025-01-24T21:05:08.000000Z"}, {"uuid": "2f66a1df-1e40-46d4-992b-eb1ee7166d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0707", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0707\n\ud83d\udd39 Description: A vulnerability was found in Rise Group Rise Mode Temp CPU 2.1. It has been classified as critical. This affects an unknown part in the library CRYPTBASE.dll of the component Startup. The manipulation leads to untrusted search path. The attack needs to be approached locally.\n\ud83d\udccf Published: 2025-01-24T20:00:15.448Z\n\ud83d\udccf Modified: 2025-01-24T20:00:15.448Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293235\n2. https://vuldb.com/?ctiid.293235\n3. https://vuldb.com/?submit.481088", "creation_timestamp": "2025-01-24T20:04:36.000000Z"}, {"uuid": "7d4ccb63-b0be-40cb-9c5c-44410834c8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0708", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0708\n\ud83d\udd39 Description: A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument \u6a21\u677f\u524d\u7f00 leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-24T20:00:21.259Z\n\ud83d\udccf Modified: 2025-01-24T20:00:21.259Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293236\n2. https://vuldb.com/?ctiid.293236\n3. https://vuldb.com/?submit.482662\n4. https://gitee.com/fumiao/opencms/issues/IBI2XM", "creation_timestamp": "2025-01-24T20:04:35.000000Z"}, {"uuid": "4d8b2a40-4e7b-4ce9-9d2d-1acf71a54e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0710", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0710\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-24T21:00:21.431Z\n\ud83d\udccf Modified: 2025-01-24T21:00:21.431Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293238\n2. https://vuldb.com/?ctiid.293238\n3. https://vuldb.com/?submit.484934\n4. https://github.com/anamika126/Stackofvulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting%20-%20Notice%20Board.pdf\n5. https://www.campcodes.com/", "creation_timestamp": "2025-01-24T21:05:05.000000Z"}, {"uuid": "2f2bc6b0-53f4-43d4-9f0f-11b21b234c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0704", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3022", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0704\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Affected is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument w/h leads to resource consumption. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.\n\ud83d\udccf Published: 2025-01-24T18:31:07.998Z\n\ud83d\udccf Modified: 2025-01-24T20:57:42.050Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293232\n2. https://vuldb.com/?ctiid.293232\n3. https://vuldb.com/?submit.480843\n4. https://github.com/JoeyBling/bootplus/issues/26\n5. https://github.com/JoeyBling/bootplus/issues/26#issue-2786934642", "creation_timestamp": "2025-01-24T21:05:14.000000Z"}, {"uuid": "c218ab64-ac27-4cc8-a589-672df5c0a904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0700", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0700\n\ud83d\udd39 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/sys/log/list. The manipulation of the argument logId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.\n\ud83d\udccf Published: 2025-01-24T17:00:18.119Z\n\ud83d\udccf Modified: 2025-01-24T20:58:44.975Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293228\n2. https://vuldb.com/?ctiid.293228\n3. https://vuldb.com/?submit.480838\n4. https://github.com/JoeyBling/bootplus/issues/22\n5. https://github.com/JoeyBling/bootplus/issues/22#issue-2786899884", "creation_timestamp": "2025-01-24T21:05:13.000000Z"}, {"uuid": "90dfd5a5-419a-43e4-a13a-0a0fcdbbf3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0701", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3020", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0701\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This affects an unknown part of the file /admin/sys/user/list. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.\n\ud83d\udccf Published: 2025-01-24T17:00:20.037Z\n\ud83d\udccf Modified: 2025-01-24T20:58:52.785Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293229\n2. https://vuldb.com/?ctiid.293229\n3. https://vuldb.com/?submit.480839\n4. https://github.com/JoeyBling/bootplus/issues/23\n5. https://github.com/JoeyBling/bootplus/issues/23#issue-2786909921", "creation_timestamp": "2025-01-24T21:05:12.000000Z"}, {"uuid": "00a045ba-28fc-46f9-85d3-04acf452748f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0721\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-27T00:15:26.317\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://vuldb.com/?ctiid.293481\n2. https://vuldb.com/?id.293481\n3. https://vuldb.com/?submit.482812\n4. https://www.websecurityinsights.my.id/2025/01/imagegallery-viewphpusername-cross-site.html", "creation_timestamp": "2025-01-27T01:15:04.000000Z"}, {"uuid": "c01c46b6-07f4-498e-ade8-b1f5c18b064a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0722\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-27T00:15:26.517\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://vuldb.com/?ctiid.293482\n2. https://vuldb.com/?id.293482\n3. https://vuldb.com/?submit.482822\n4. https://www.websecurityinsights.my.id/2025/01/imagegallery-add-gallery.html", "creation_timestamp": "2025-01-27T01:15:03.000000Z"}, {"uuid": "d4ef52ed-12d3-4886-b465-839452b24861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0720", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x6gh-vhp5-7vpc\n\ud83d\udd25 CVSS Score: 3.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-27T00:31:29Z\n\ud83d\udccf Modified: 2025-01-27T00:31:29Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0720\n2. https://vuldb.com/?ctiid.293480\n3. https://vuldb.com/?id.293480\n4. https://vuldb.com/?submit.482371", "creation_timestamp": "2025-01-27T01:06:54.000000Z"}, {"uuid": "9b0a752f-dd37-47c5-8286-7918777aaf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2377-g2h8-5f9c\n\ud83d\udd25 CVSS Score: 4.6 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in needyamin image_gallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-27T00:31:33Z\n\ud83d\udccf Modified: 2025-01-27T00:31:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0722\n2. https://vuldb.com/?ctiid.293482\n3. https://vuldb.com/?id.293482\n4. https://vuldb.com/?submit.482822\n5. https://www.websecurityinsights.my.id/2025/01/imagegallery-add-gallery.html", "creation_timestamp": "2025-01-27T01:06:54.000000Z"}, {"uuid": "b7752dfd-f730-409f-a5ae-b8477f6dcb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0706", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0706\n\ud83d\udd39 Description: A vulnerability was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/sys/admin.html. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.\n\ud83d\udccf Published: 2025-01-24T19:31:10.101Z\n\ud83d\udccf Modified: 2025-01-24T19:49:51.699Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293234\n2. https://vuldb.com/?ctiid.293234\n3. https://vuldb.com/?submit.480845\n4. https://github.com/JoeyBling/bootplus/issues/28\n5. https://github.com/JoeyBling/bootplus/issues/28#issue-2786945699", "creation_timestamp": "2025-01-24T20:04:45.000000Z"}, {"uuid": "4a269461-a283-47c3-bf23-4d0fce7a152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0709", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0709\n\ud83d\udd39 Description: A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Roles Page. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-24T20:31:05.748Z\n\ud83d\udccf Modified: 2025-01-24T20:42:28.624Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293237\n2. https://vuldb.com/?ctiid.293237\n3. https://vuldb.com/?submit.483364\n4. https://github.com/taynes-llllzt/taynes/issues/7\n5. https://github.com/taynes-llllzt/taynes/issues/7#issue-2792259251", "creation_timestamp": "2025-01-24T21:05:22.000000Z"}, {"uuid": "29783271-2852-45e4-8e76-12dbf016fa20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-28rh-grjq-98g6\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This affects the function image_gallery of the file /view.php. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-27T00:31:33Z\n\ud83d\udccf Modified: 2025-01-27T00:31:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0721\n2. https://vuldb.com/?ctiid.293481\n3. https://vuldb.com/?id.293481\n4. https://vuldb.com/?submit.482812\n5. https://www.websecurityinsights.my.id/2025/01/imagegallery-viewphpusername-cross-site.html", "creation_timestamp": "2025-01-27T01:06:53.000000Z"}, {"uuid": "72bb8515-2e76-4457-9777-e0e0b9ed3706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3251", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0750\n\ud83d\udd25 CVSS Score: 6.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.\n\ud83d\udccf Published: 2025-01-28T12:31:07Z\n\ud83d\udccf Modified: 2025-01-28T12:31:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0750\n2. https://access.redhat.com/security/cve/CVE-2025-0750\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339405", "creation_timestamp": "2025-01-28T13:09:24.000000Z"}, {"uuid": "9b30735a-3db6-419f-a674-7f9bde7be489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T12:31:07Z\n\ud83d\udccf Modified: 2025-01-28T12:31:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0752\n2. https://access.redhat.com/security/cve/CVE-2025-0752\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-01-28T13:09:23.000000Z"}, {"uuid": "36124ff4-91a1-4cb2-af4e-503dd142a0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T12:31:08Z\n\ud83d\udccf Modified: 2025-01-28T12:31:08Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0754\n2. https://access.redhat.com/security/cve/CVE-2025-0754\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-01-28T13:09:22.000000Z"}, {"uuid": "1f7ffce5-2be2-4cf4-94d0-9291e8c1375b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0790", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0790\n\ud83d\udd25 CVSS Score: 3.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0790\n2. https://github.com/Rain1er/report/blob/main/CDG/doneDetail_1.md\n3. https://vuldb.com/?ctiid.293914\n4. https://vuldb.com/?id.293914\n5. https://vuldb.com/?submit.483343", "creation_timestamp": "2025-01-29T01:10:04.000000Z"}, {"uuid": "bf370800-703b-4aa6-940a-c7d429cb000e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0792", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3320", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0792\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0792\n2. https://github.com/Rain1er/report/blob/main/CDG/sdTodoDetail.md\n3. https://vuldb.com/?ctiid.293916\n4. https://vuldb.com/?id.293916\n5. https://vuldb.com/?submit.483345", "creation_timestamp": "2025-01-29T01:09:59.000000Z"}, {"uuid": "b1a8ef68-5c19-499a-97c3-50deb0437510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0786", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0786\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T22:15:16.423\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/appDetail.md\n2. https://vuldb.com/?ctiid.293910\n3. https://vuldb.com/?id.293910\n4. https://vuldb.com/?submit.483339", "creation_timestamp": "2025-01-28T23:17:55.000000Z"}, {"uuid": "98fed0af-89db-43a1-b63a-dfb4a66d10d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0787", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0787\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T22:15:16.600\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/appDetail_1.md\n2. https://vuldb.com/?ctiid.293911\n3. https://vuldb.com/?id.293911\n4. https://vuldb.com/?submit.483340", "creation_timestamp": "2025-01-28T23:17:54.000000Z"}, {"uuid": "675bb3ee-6f7b-49fd-af3e-8ab730ca0005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0785\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T22:15:16.227\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/SysConfig.md\n2. https://vuldb.com/?ctiid.293909\n3. https://vuldb.com/?id.293909\n4. https://vuldb.com/?submit.483338", "creation_timestamp": "2025-01-28T23:17:58.000000Z"}, {"uuid": "e59b6276-41e4-44f7-a900-0c4df2db2044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0788", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0788\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0788\n2. https://github.com/Rain1er/report/blob/main/CDG/content_top.md\n3. https://vuldb.com/?ctiid.293912\n4. https://vuldb.com/?id.293912\n5. https://vuldb.com/?submit.483341", "creation_timestamp": "2025-01-29T01:09:57.000000Z"}, {"uuid": "caa799d1-826b-40ec-aa4b-6ed76caf3a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0789", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0789\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0789\n2. https://github.com/Rain1er/report/blob/main/CDG/doneDetail.md\n3. https://vuldb.com/?ctiid.293913\n4. https://vuldb.com/?id.293913\n5. https://vuldb.com/?submit.483342", "creation_timestamp": "2025-01-29T01:09:58.000000Z"}, {"uuid": "c98ad6a1-9ff6-4bda-ba3d-c9ff4e71e768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0785\n\ud83d\udd25 CVSS Score: 3.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0785\n2. https://github.com/Rain1er/report/blob/main/CDG/SysConfig.md\n3. https://vuldb.com/?ctiid.293909\n4. https://vuldb.com/?id.293909\n5. https://vuldb.com/?submit.483338", "creation_timestamp": "2025-01-29T01:10:06.000000Z"}, {"uuid": "d8b7e8fc-c07c-4f4b-aec2-4984e7905e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0786", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0786\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0786\n2. https://github.com/Rain1er/report/blob/main/CDG/appDetail.md\n3. https://vuldb.com/?ctiid.293910\n4. https://vuldb.com/?id.293910\n5. https://vuldb.com/?submit.483339", "creation_timestamp": "2025-01-29T01:10:06.000000Z"}, {"uuid": "f6620b1d-9f57-4906-9ba4-16b62768daa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0791", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3323", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0791\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0791\n2. https://github.com/Rain1er/report/blob/main/CDG/sdDoneDetail.md\n3. https://vuldb.com/?ctiid.293915\n4. https://vuldb.com/?id.293915\n5. https://vuldb.com/?submit.483344", "creation_timestamp": "2025-01-29T01:10:04.000000Z"}, {"uuid": "cfb3b125-74aa-4fb5-a697-9240860c2d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0787", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3330", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0787\n\ud83d\udd25 CVSS Score: 3.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0787\n2. https://github.com/Rain1er/report/blob/main/CDG/appDetail_1.md\n3. https://vuldb.com/?ctiid.293911\n4. https://vuldb.com/?id.293911\n5. https://vuldb.com/?submit.483340", "creation_timestamp": "2025-01-29T01:10:13.000000Z"}, {"uuid": "0c528eda-fa1d-4c0f-87d3-98453a12f99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0798\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T02:15:27.190\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/dmknght/FIS_RnD/blob/main/escan_rtscanner_rce.md\n2. https://vuldb.com/?ctiid.293921\n3. https://vuldb.com/?id.293921\n4. https://vuldb.com/?submit.484718", "creation_timestamp": "2025-01-29T03:17:22.000000Z"}, {"uuid": "aab64182-7126-4644-a83a-823e436c0d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3346", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0793\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T01:15:07.780\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/todoDetail.md\n2. https://vuldb.com/?ctiid.293917\n3. https://vuldb.com/?id.293917\n4. https://vuldb.com/?submit.483346", "creation_timestamp": "2025-01-29T03:17:29.000000Z"}, {"uuid": "298a820f-3458-4317-a6e3-3315255542a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0794", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0794\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T01:15:07.943\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/todoDetail_1.md\n2. https://vuldb.com/?ctiid.293918\n3. https://vuldb.com/?id.293918\n4. https://vuldb.com/?submit.483347", "creation_timestamp": "2025-01-29T03:17:28.000000Z"}, {"uuid": "249b9a20-3d4c-4d59-8368-934d2afdd62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0795\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T02:15:26.830\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Rain1er/report/blob/main/CDG/todolistjump.md\n2. https://vuldb.com/?ctiid.293919\n3. https://vuldb.com/?id.293919\n4. https://vuldb.com/?submit.483349", "creation_timestamp": "2025-01-29T03:17:27.000000Z"}, {"uuid": "c8016493-6c68-459b-b480-d6d51bf89fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T02:15:27.010\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/dmknght/FIS_RnD/blob/main/escan_av_incorrect_default_perms_leads_to_malware_evasion.md\n2. https://vuldb.com/?ctiid.293920\n3. https://vuldb.com/?id.293920\n4. https://vuldb.com/?submit.484329", "creation_timestamp": "2025-01-29T03:17:26.000000Z"}, {"uuid": "befde5bd-5daa-4532-83a7-bd3004696be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0798\n\ud83d\udd25 CVSS Score: 8.1 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T03:31:49Z\n\ud83d\udccf Modified: 2025-01-29T03:31:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0798\n2. https://github.com/dmknght/FIS_RnD/blob/main/escan_rtscanner_rce.md\n3. https://vuldb.com/?ctiid.293921\n4. https://vuldb.com/?id.293921\n5. https://vuldb.com/?submit.484718", "creation_timestamp": "2025-01-29T04:09:48.000000Z"}, {"uuid": "37126400-13c4-4be1-9224-7c0d9bed5d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0797\n\ud83d\udd25 CVSS Score: 3.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T03:31:48Z\n\ud83d\udccf Modified: 2025-01-29T03:31:48Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0797\n2. https://github.com/dmknght/FIS_RnD/blob/main/escan_av_incorrect_default_perms_leads_to_malware_evasion.md\n3. https://vuldb.com/?ctiid.293920\n4. https://vuldb.com/?id.293920\n5. https://vuldb.com/?submit.484329", "creation_timestamp": "2025-01-29T04:09:53.000000Z"}, {"uuid": "535fd20e-bcff-4f3f-b63d-92ebff9df6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0794", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3358", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0794\n\ud83d\udd25 CVSS Score: 3.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T03:31:47Z\n\ud83d\udccf Modified: 2025-01-29T03:31:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0794\n2. https://github.com/Rain1er/report/blob/main/CDG/todoDetail_1.md\n3. https://vuldb.com/?ctiid.293918\n4. https://vuldb.com/?id.293918\n5. https://vuldb.com/?submit.483347", "creation_timestamp": "2025-01-29T04:09:59.000000Z"}, {"uuid": "2631043b-64a6-480d-a0c5-cc53034de01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3357", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0793\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-29T03:31:47Z\n\ud83d\udccf Modified: 2025-01-29T03:31:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0793\n2. https://github.com/Rain1er/report/blob/main/CDG/todoDetail.md\n3. https://vuldb.com/?ctiid.293917\n4. https://vuldb.com/?id.293917\n5. https://vuldb.com/?submit.483346", "creation_timestamp": "2025-01-29T04:09:55.000000Z"}, {"uuid": "1fc8179e-0c2b-4ab4-a740-bb3b74cc25a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0744\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the \"/demos/embedai/pmt_cash_on_delivery/pay\" endpoint.\n\ud83d\udccf Published: 2025-01-30T12:31:19Z\n\ud83d\udccf Modified: 2025-01-30T12:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0744\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:23.000000Z"}, {"uuid": "3898cb88-660d-4427-b44b-02c4dc6cd3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0747\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat.\n\ud83d\udccf Published: 2025-01-30T12:31:20Z\n\ud83d\udccf Modified: 2025-01-30T12:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0747\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:22.000000Z"}, {"uuid": "cc8f5cf2-481c-428a-b9cd-de73b975821b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3411", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0781\n\ud83d\udd25 CVSS Score: 9.4 (CVSS_V3)\n\ud83d\udd39 Description: An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.\n\ud83d\udccf Published: 2025-01-28T18:31:28Z\n\ud83d\udccf Modified: 2025-01-29T21:31:24Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0781\n2. https://gitlab.com/flightgear/flightgear/-/commit/ad37afce28083fad7f79467b3ffdead753584358\n3. https://gitlab.com/flightgear/flightgear/-/issues/3025\n4. https://gitlab.com/flightgear/simgear/-/commit/5bb023647114267141a7610e8f1ca7d6f4f5a5a8\n5. https://lists.debian.org/debian-lts-announce/2025/01/msg00028.html", "creation_timestamp": "2025-01-29T22:11:00.000000Z"}, {"uuid": "ae6fb777-8d15-4756-985c-8fdd7d34d799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0741\n\ud83d\udd25 CVSS Score: 6.0 (CVSS_V3)\n\ud83d\udd39 Description: An Improper Access Control vulnerability has been found in EmbedAI\n\n 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter \"chat_id\" of the POST request \"/embedai/chats/send_message\".\n\ud83d\udccf Published: 2025-01-30T12:31:19Z\n\ud83d\udccf Modified: 2025-01-30T12:31:19Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0741\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:27.000000Z"}, {"uuid": "f3a6327a-024c-4174-9489-afb6863b21e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0760", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5416", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0760\n\ud83d\udd25 CVSS Score: 2.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.\n\ud83d\udccf Published: 2025-02-25T23:31:24.292Z\n\ud83d\udccf Modified: 2025-02-25T23:31:24.292Z\n\ud83d\udd17 References:\n1. https://www.tenable.com/security/tns-2025-01", "creation_timestamp": "2025-02-26T00:23:01.000000Z"}, {"uuid": "ed9cc116-1b00-46f0-9bee-70487a940441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4866", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0726\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before \nversion 6.4.2, an attacker can cause a denial of service by specially \ncrafted packets. The core issue is missing closing of a file in case of \nan error condition, resulting in the 404 error for each further file \nrequest. Users can work-around the issue by disabling the PUT request \nsupport.\n\ud83d\udccf Published: 2025-02-21T08:12:11.703Z\n\ud83d\udccf Modified: 2025-02-21T08:12:11.703Z\n\ud83d\udd17 References:\n1. https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014\n2. https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pwf8-5q9w-m763", "creation_timestamp": "2025-02-21T08:18:01.000000Z"}, {"uuid": "5f3eed33-90bf-45fd-bc9d-e02fab4882dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4913", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0727\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before \nversion 6.4.2, an attacker can cause an integer underflow and a \nsubsequent denial of service by writing a very large file, by specially \ncrafted packets with Content-Length in one packet smaller than the data \nrequest size of the other packet. A possible workaround is to disable \nHTTP PUT support.\n\ud83d\udccf Published: 2025-02-21T08:19:11.412Z\n\ud83d\udccf Modified: 2025-02-21T15:34:39.515Z\n\ud83d\udd17 References:\n1. https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014\n2. https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-jf6x-9mgc-p72w", "creation_timestamp": "2025-02-21T16:18:29.000000Z"}, {"uuid": "95583bef-8f7c-47be-9b0c-a03180c8c225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0799", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0799\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: IBM App Connect enterprise\u00a012.0.1.0 through 12.0.12.10 and\u00a013.0.1.0 through 13.0.2.1\u00a0could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.\n\ud83d\udccf Published: 2025-02-06T00:24:40.878Z\n\ud83d\udccf Modified: 2025-02-22T22:16:23.189Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7182418", "creation_timestamp": "2025-02-22T23:19:50.000000Z"}, {"uuid": "0ebe5146-a032-4bb6-91d3-b44c168afdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0731", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0731\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.\n\ud83d\udccf Published: 2025-02-26T10:01:50.336Z\n\ud83d\udccf Modified: 2025-02-26T10:01:50.336Z\n\ud83d\udd17 References:\n1. https://cert.vde.com/en/advisories/VDE-2025-012", "creation_timestamp": "2025-02-26T10:24:39.000000Z"}, {"uuid": "675e5b29-4b07-4ba3-a59e-6813a1ef91c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5495", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0719\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\n\ud83d\udccf Published: 2025-02-26T14:04:04.974Z\n\ud83d\udccf Modified: 2025-02-26T14:20:27.526Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7184173", "creation_timestamp": "2025-02-26T14:25:22.000000Z"}, {"uuid": "8e841da5-b521-4812-9ff2-2091daef383d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0759", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0759\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared resource synchronization.\n\ud83d\udccf Published: 2025-02-27T14:53:41.714Z\n\ud83d\udccf Modified: 2025-02-27T15:11:40.468Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7184194", "creation_timestamp": "2025-02-27T15:29:31.000000Z"}, {"uuid": "f8990a22-7bce-40ba-a441-12f6150e5139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0767", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0767\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.\n\ud83d\udccf Published: 2025-02-27T18:14:52.946Z\n\ud83d\udccf Modified: 2025-02-27T18:14:52.946Z\n\ud83d\udd17 References:\n1. https://fluidattacks.com/advisories/skims-9/\n2. https://co.wordpress.org/plugins/wp-security-audit-log/", "creation_timestamp": "2025-02-27T18:26:51.000000Z"}, {"uuid": "0b04f074-b25a-43f3-8792-f82af9ec566a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0764", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5847", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0764\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'update' method of the 'Members' class in all versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with subscriber-level privileges or higher, to read arbitrary files on the server.\n\ud83d\udccf Published: 2025-02-28T07:03:46.135Z\n\ud83d\udccf Modified: 2025-02-28T07:03:46.135Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8cd8ffcb-0a24-4e0a-a9f9-23501742715f?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3245711/wpforo", "creation_timestamp": "2025-02-28T07:26:02.000000Z"}, {"uuid": "1acfa97d-0b8f-4001-b1b9-a71c9ae095de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0749\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.\n\ud83d\udccf Published: 2025-03-07T01:44:53.516Z\n\ud83d\udccf Modified: 2025-03-07T01:44:53.516Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve\n2. https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog", "creation_timestamp": "2025-03-07T02:35:12.000000Z"}, {"uuid": "38fadac2-f7bc-43af-829c-5e166b977225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0748\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T01:44:54.459Z\n\ud83d\udccf Modified: 2025-03-07T01:44:54.459Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a35a66c6-2a86-4f6e-b28e-d79e13489a49?source=cve\n2. https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog", "creation_timestamp": "2025-03-07T02:35:10.000000Z"}, {"uuid": "8de5c83a-60f0-4ddd-b2af-6724328907bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0736", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7260", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0736\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors.\n\ud83d\udccf Published: 2025-01-28T09:12:38.101Z\n\ud83d\udccf Modified: 2025-03-12T03:27:37.478Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2663\n2. https://access.redhat.com/security/cve/CVE-2025-0736\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2342233", "creation_timestamp": "2025-03-12T03:44:26.000000Z"}, {"uuid": "0a81ee87-558f-452c-a7a2-165e41157f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T09:29:33.073Z\n\ud83d\udccf Modified: 2025-03-12T01:54:23.727Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0752\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-03-12T02:40:27.000000Z"}, {"uuid": "97563c5f-d11a-4ebf-90c1-944f513792fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T09:37:11.500Z\n\ud83d\udccf Modified: 2025-03-12T22:27:47.036Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0754\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-03-12T22:41:04.000000Z"}, {"uuid": "82ea0066-c9f6-4870-81f5-3b4882afc110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0750\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.\n\ud83d\udccf Published: 2025-01-28T09:29:30.831Z\n\ud83d\udccf Modified: 2025-03-15T00:22:37.418Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:1122\n2. https://access.redhat.com/security/cve/CVE-2025-0750\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339405", "creation_timestamp": "2025-03-15T00:45:37.000000Z"}, {"uuid": "18c7830a-76e2-4719-a49b-d1e4d9843a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0755\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16\n\ud83d\udccf Published: 2025-03-18T09:01:04.793Z\n\ud83d\udccf Modified: 2025-03-18T09:01:04.793Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/SERVER-94461", "creation_timestamp": "2025-03-18T09:50:42.000000Z"}, {"uuid": "a28739e7-94a0-4703-a839-ac35c23b9d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8600", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0717\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: To exploit the vulnerability, it is necessary:\n\ud83d\udccf Published: 2025-03-25T06:00:14.221Z\n\ud83d\udccf Modified: 2025-03-25T06:00:14.221Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/31f734fc-d474-46b3-98eb-04761cab8878/", "creation_timestamp": "2025-03-25T06:23:32.000000Z"}, {"uuid": "945c2c3e-a794-4b42-8231-e6f4ddd03e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10638", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2259\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before \nversion 6.4.3, an attacker can cause an integer underflow and a \nsubsequent denial of service by writing a very large file, by specially \ncrafted packets with Content-Length in one packet smaller than the data \nrequest size of the other packet. A possible workaround is to disable \nHTTP PUT support.\n\n\n\n\nThis issue follows an incomplete fix of CVE-2025-0727\n\ud83d\udccf Published: 2025-04-06T19:01:20.233Z\n\ud83d\udccf Modified: 2025-04-06T19:01:20.233Z\n\ud83d\udd17 References:\n1. https://github.com/eclipse-threadx/netxduo/commit/fb3195bbb6d0d6fe71a7a19585c008623c217f9e\n2. https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-chhp-gmxc-46rq", "creation_timestamp": "2025-04-06T19:44:12.000000Z"}, {"uuid": "4efde8c2-9a65-4078-8455-d7d0d2eb7c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2260\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before \nversion 6.4.3, an attacker can cause a denial of service by specially \ncrafted packets. The core issue is missing closing of a file in case of \nan error condition, resulting in the 404 error for each further file \nrequest. Users can work-around the issue by disabling the PUT request \nsupport.\n\n\n\n\nThis issue follows an incomplete fix of CVE-2025-0726.\n\ud83d\udccf Published: 2025-04-06T18:56:34.730Z\n\ud83d\udccf Modified: 2025-04-06T18:56:34.730Z\n\ud83d\udd17 References:\n1. https://github.com/eclipse-threadx/netxduo/commit/fb3195bbb6d0d6fe71a7a19585c008623c217f9e\n2. https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-f42f-6fvv-xqx3", "creation_timestamp": "2025-04-06T19:44:13.000000Z"}, {"uuid": "13630044-0205-4e05-bc8b-017180243822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10640", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2258\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before \nversion 6.4.3, an attacker can cause an integer underflow and a \nsubsequent denial of service by writing a very large file, by specially \ncrafted packets with Content-Length smaller than the data request size. A\n possible workaround is to disable HTTP PUT support.\n\n\n\n\nThis issue follows an uncomplete fix in CVE-2025-0728.\n\ud83d\udccf Published: 2025-04-06T18:50:42.764Z\n\ud83d\udccf Modified: 2025-04-06T18:50:42.764Z\n\ud83d\udd17 References:\n1. https://github.com/eclipse-threadx/netxduo/commit/6c8e9d1c95d71bd4b313e1cc37d8f8841543b248\n2. https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-chqp-8vf8-cj25", "creation_timestamp": "2025-04-06T19:44:14.000000Z"}, {"uuid": "6e28fffd-fca8-4436-9dfe-7cc27609fd5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12015", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0721\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This affects the function image_gallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-26T23:31:04.608Z\n\ud83d\udccf Modified: 2025-04-16T11:21:26.458Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293481\n2. https://vuldb.com/?ctiid.293481\n3. https://vuldb.com/?submit.482812\n4. https://www.websecurityinsights.my.id/2025/01/imagegallery-viewphpusername-cross-site.html", "creation_timestamp": "2025-04-16T11:56:54.000000Z"}, {"uuid": "b1537857-ebd5-4a10-8394-2dd59f615ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0722\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in needyamin image_gallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-26T23:31:06.503Z\n\ud83d\udccf Modified: 2025-04-16T11:21:50.763Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293482\n2. https://vuldb.com/?ctiid.293482\n3. https://vuldb.com/?submit.482822\n4. https://www.websecurityinsights.my.id/2025/01/imagegallery-add-gallery.html", "creation_timestamp": "2025-04-16T11:56:53.000000Z"}, {"uuid": "fe3783b1-76cf-41bf-b008-72d3f91eebd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0757\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Overview\n\n\n\n\u00a0\n\n\n\nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) \n\n\n\n\u00a0\n\n\n\nDescription \n\n\n\n\u00a0\n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. \n\n\n\n\u00a0\n\n\n\nImpact \n\n\n\n\u00a0\n\n\n\nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.\n\ud83d\udccf Published: 2025-04-16T22:18:19.156Z\n\ud83d\udccf Modified: 2025-04-16T22:18:19.156Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/35781038882445--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0757", "creation_timestamp": "2025-04-16T22:57:44.000000Z"}, {"uuid": "bfd23fa0-c552-4349-9f1c-9a14774238c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12163", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0756\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Overview \n\n\n\n\u00a0\n\n\n\nThe product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99) \n\n\n\n\u00a0\n\n\n\nDescription \n\n\n\n\u00a0\n\n\n\nHitachi Vantara Pentaho Data Integration &amp; Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not restrict JNDI identifiers during the creation of platform data sources. \n\n\n\n\u00a0\n\n\n\nImpact \n\n\n\n\u00a0\n\n\n\nAn attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users.\n\ud83d\udccf Published: 2025-04-16T22:23:19.116Z\n\ud83d\udccf Modified: 2025-04-16T22:23:19.116Z\n\ud83d\udd17 References:\n1. https://https://support.pentaho.com/hc/en-us/articles/35771876077709--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Improper-Control-of-Resource-Identifiers-Resource-Injection-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0756", "creation_timestamp": "2025-04-16T22:57:42.000000Z"}, {"uuid": "ae16ccc6-877d-44fb-acec-a4c5487f7cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0758\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: Overview\u00a0\n\n\n\nThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732)\u00a0\n\n\n\nDescription\u00a0\n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default.\u00a0\n\n\n\nImpact\u00a0\n\n\n\nWhen the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product.\n\ud83d\udccf Published: 2025-04-16T22:12:29.724Z\n\ud83d\udccf Modified: 2025-04-16T22:13:52.521Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/35781318194061--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Incorrect-Permission-Assignment-for-Critical-Resource-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0758", "creation_timestamp": "2025-04-16T22:57:46.000000Z"}, {"uuid": "dcb156e1-ebff-4372-ad2f-ffc662fa8acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T09:37:11.500Z\n\ud83d\udccf Modified: 2025-04-17T08:30:11.306Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0754\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-04-17T08:57:46.000000Z"}, {"uuid": "15cd7ec7-0b2b-4479-96d7-c35c5ab5dbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T09:29:33.073Z\n\ud83d\udccf Modified: 2025-04-17T08:39:13.012Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0752\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-04-17T08:57:45.000000Z"}, {"uuid": "062ef016-966b-4755-99b2-8ecfe7fade2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0755\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16\n\ud83d\udccf Published: 2025-03-18T09:01:04.793Z\n\ud83d\udccf Modified: 2025-04-24T08:42:52.079Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/SERVER-94461\n2. https://jira.mongodb.org/browse/CDRIVER-5601", "creation_timestamp": "2025-04-24T09:12:04.000000Z"}, {"uuid": "fcf1c37f-93c3-45d8-a49b-b18bdcb2cf3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0782", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0782\n\ud83d\udd25 CVSS Score: 10 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability could lead to remote code execution (RCE) on any user who uses the application. Additionally, an attacker could modify the documentation to include malicious download links.\n\ud83d\udccf Published: 2025-05-02T20:11:19.114Z\n\ud83d\udccf Modified: 2025-05-06T15:02:12.763Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/4587cec7-8bc5-48ab-8614-105d41c99151\n2. https://github.com/h2oai/h2o-3/commit/6740655b70cef40ec67d952bee2d23f7d33c7419", "creation_timestamp": "2025-05-06T15:21:39.000000Z"}, {"uuid": "5645636d-59f4-4dd6-a9cb-e930fc8c8458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0725\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.\n\ud83d\udccf Published: 2025-02-05T09:18:20.468Z\n\ud83d\udccf Modified: 2025-06-12T16:04:29.956Z\n\ud83d\udd17 References:\n1. https://curl.se/docs/CVE-2025-0725.json\n2. https://curl.se/docs/CVE-2025-0725.html\n3. https://hackerone.com/reports/2956023", "creation_timestamp": "2025-06-12T16:34:37.000000Z"}, {"uuid": "b53147d4-35bf-4156-8a5e-b2266c83045b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0764", "type": "seen", "source": "Telegram/NALwBTyIU_AZyfY3j3L35IcV6YFiX5T8UT28jdT1o1OqDyPA", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "34079fb5-3882-47eb-8653-d1a779d5a17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0721", "type": "seen", "source": "https://t.me/cvedetector/16425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0721 - Needyamin Image Gallery Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0721 \nPublished : Jan. 27, 2025, 12:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in needyamin image_gallery 1.0. This affects the function image_gallery of the file /view.php. The manipulation of the argument username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T03:27:03.000000Z"}, {"uuid": "8abe6c87-dc1c-4259-b5d9-06b114bf1083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0722", "type": "seen", "source": "https://t.me/cvedetector/16424", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0722 - Needyamin image_gallery Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0722 \nPublished : Jan. 27, 2025, 12:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in needyamin image_gallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T03:27:02.000000Z"}, {"uuid": "93dc52be-16a1-42c9-8d6f-585aa6a89b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0720", "type": "seen", "source": "https://t.me/cvedetector/16423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0720 - Microword eScan Antivirus Stack-based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-0720 \nPublished : Jan. 26, 2025, 11:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T01:46:40.000000Z"}, {"uuid": "58a85841-f19d-4266-8741-511891562923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://t.me/cvedetector/16765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0740 - EmbedAI Chat Message Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-0740 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI  \n  \n 2.1 and below. This vulnerability allows an authenticated attacker to obtain chat messages belonging to other users by changing the \u201cCHAT_ID\u201d of the endpoint \"/embedai/chats/load_messages?chat_id=\". \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:03.000000Z"}, {"uuid": "6beda6ae-44f2-4296-b9be-addc26ba7322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://t.me/cvedetector/16766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0741 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0741 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI  \n  \n 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter \"chat_id\" of the POST request \"/embedai/chats/send_message\". \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:07.000000Z"}, {"uuid": "5ce7234a-eb10-4697-8e41-16d641b2c635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0739", "type": "seen", "source": "https://t.me/cvedetector/16764", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0739 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0739 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to show subscription's information of others users by changing the \"SUSCBRIPTION_ID\" param of the endpoint \"/demos/embedai/subscriptions/show/\". \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:02.000000Z"}, {"uuid": "17ce5aad-fe61-4064-bdcc-02fe5c1bd4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0734", "type": "seen", "source": "https://t.me/cvedetector/16507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0734 - \"y_project RuoYi Whitelist Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0734 \nPublished : Jan. 27, 2025, 7:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T21:51:59.000000Z"}, {"uuid": "9a9152d1-29e7-4c4d-8fc1-84d946e87712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://t.me/cvedetector/16761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0745 - EmbedAI Unauthorized DB Backup Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-0745 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the \"/embedai/app/uploads/database/\" endpoint. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:00.000000Z"}, {"uuid": "a8d46fb2-dfa1-4325-9d92-15619d9b274c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://t.me/cvedetector/16760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0744 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0744 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the \"/demos/embedai/pmt_cash_on_delivery/pay\" endpoint. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:55.000000Z"}, {"uuid": "194baea2-2217-4d19-9b74-e29281e7a5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://t.me/cvedetector/16759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0743 - EmbedAI Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0743 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint \"/embedai/visits/show/\" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:55.000000Z"}, {"uuid": "7f6407ec-f249-4bcf-bf94-e3cd2552cafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://t.me/cvedetector/16758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0742 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0742 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the \"FILE_ID\" of the endpoint \"/embedai/files/show/\". \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:54.000000Z"}, {"uuid": "d27a6af5-1d1f-4a9f-967c-a38f36cabfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://t.me/cvedetector/16757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0747 - EmbedAI Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0747 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:53.000000Z"}, {"uuid": "713ee795-fed7-4b20-aa55-3940a2ce37d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://t.me/cvedetector/16756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0746 - EmbedAI Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0746 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the\"/embedai/users/show/\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:52.000000Z"}, {"uuid": "d938b918-d607-4093-b55c-a285217e97e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0787", "type": "seen", "source": "https://t.me/cvedetector/16652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0787 - ESAFENET CDG Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0787 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:04.000000Z"}, {"uuid": "e673286a-0200-4786-963a-1fc3da817cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0786", "type": "seen", "source": "https://t.me/cvedetector/16651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0786 - ESA FENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0786 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:03.000000Z"}, {"uuid": "41081a18-2331-4543-b8ed-a5bd3f98b89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0762", "type": "seen", "source": "https://t.me/cvedetector/16677", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0762 - Google Chrome DevTools Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0762 \nPublished : Jan. 29, 2025, 11:15 a.m. | 46\u00a0minutes ago \nDescription : Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T13:10:47.000000Z"}, {"uuid": "2045000a-1830-49af-bb67-90da3ac3004d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0795", "type": "seen", "source": "https://t.me/cvedetector/16671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0795 - ESAFENET CDG Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0795 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:50.000000Z"}, {"uuid": "227f7ca7-9444-4d40-a13d-f374bd7f302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "seen", "source": "https://t.me/cvedetector/16666", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0798 - MicroWorld eScan Antivirus os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0798 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affects some unknown processing of the file rtscanner of the component Quarantine Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:43.000000Z"}, {"uuid": "3d8c05b5-d8fb-4e2a-b579-feac6e30ef0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0797", "type": "seen", "source": "https://t.me/cvedetector/16665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0797 - eScan Antivirus Linux: Quarantine Handler Default Permissions VulnerabilityDisclosure\", \n  \"Content\": \"CVE ID : CVE-2025-0797 \nPublished : Jan. 29, 2025, 2:15 a.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default permissions. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T05:39:43.000000Z"}, {"uuid": "88fb1cdf-b3ff-4715-a2e1-3034177130ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0792", "type": "seen", "source": "https://t.me/cvedetector/16661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0792 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0792 \nPublished : Jan. 29, 2025, 12:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T03:09:20.000000Z"}, {"uuid": "6dd92d38-2c7c-4ba4-b00d-f8f6820fd905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0791", "type": "seen", "source": "https://t.me/cvedetector/16660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0791 - ESA FENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0791 \nPublished : Jan. 29, 2025, 12:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T03:09:19.000000Z"}, {"uuid": "526955b2-ba28-440e-912e-f062a3f7e0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0790", "type": "seen", "source": "https://t.me/cvedetector/16659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0790 - \"ESAFENET CDG Cross Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0790 \nPublished : Jan. 29, 2025, 12:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T03:09:19.000000Z"}, {"uuid": "6d017d4a-1212-4dca-9f93-3c2a45070a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0793", "type": "seen", "source": "https://t.me/cvedetector/16658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0793 - ESAFENET CDG V5 SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0793 \nPublished : Jan. 29, 2025, 1:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T03:09:18.000000Z"}, {"uuid": "b94fd718-ed8f-4c27-b42d-5151d9100d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0794", "type": "seen", "source": "https://t.me/cvedetector/16657", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0794 - ESAFENET CDG V5 Cross-Site Scripting in /todoDetail.jsp\", \n  \"Content\": \"CVE ID : CVE-2025-0794 \nPublished : Jan. 29, 2025, 1:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T03:09:17.000000Z"}, {"uuid": "ee8d84b0-06c8-4a42-bb53-1c0b7f2d2c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0785", "type": "seen", "source": "https://t.me/cvedetector/16650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0785 - ESAFENET CDG Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0785 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:03.000000Z"}, {"uuid": "b0111b3c-31d6-4be4-ba14-4c76ecd6f2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0789", "type": "seen", "source": "https://t.me/cvedetector/16646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0789 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0789 \nPublished : Jan. 28, 2025, 11:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:28:57.000000Z"}, {"uuid": "0a33950f-cd58-4ec0-96a2-72ceb7613bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0788", "type": "seen", "source": "https://t.me/cvedetector/16645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0788 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0788 \nPublished : Jan. 28, 2025, 11:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:28:56.000000Z"}, {"uuid": "567c3c47-8293-4f4c-8cc5-1f803728dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0784", "type": "seen", "source": "https://t.me/cvedetector/16630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0784 - Intelbras InControl Insecure Cleartext Transmission of Sensitive Information Vuln\", \n  \"Content\": \"CVE ID : CVE-2025-0784 \nPublished : Jan. 28, 2025, 8:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.59 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T22:58:15.000000Z"}, {"uuid": "c97c9b5b-f1cb-41ef-aa17-7ea841d270fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://t.me/cvedetector/24047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0716 - AngularJS SVG Image Content Spoofing\", \n  \"Content\": \"CVE ID : CVE-2025-0716 \nPublished : April 29, 2025, 5:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '' SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of  Content Spoofing  \u00a0and also negatively affect the application's performance and behavior by using too large or slow-to-load images.  \n  \nThis issue affects all versions of AngularJS.  \n  \nNote:  \nThe AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see  here  . \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:21.000000Z"}, {"uuid": "d7836718-73e3-4f8e-8acc-c529f30d443b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "seen", "source": "https://t.me/cvedetector/23200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0757 - Hitachi Vantara Pentaho Business Analytics Server Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0757 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview  \n  \n  \n  \n\u00a0  \n  \n  \n  \nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79)   \n  \n  \n  \n\u00a0  \n  \n  \n  \nDescription   \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface.   \n  \n  \n  \n\u00a0  \n  \n  \n  \nImpact   \n  \n  \n  \n\u00a0  \n  \n  \n  \nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:37.000000Z"}, {"uuid": "41bd193b-9c3f-4384-9ae3-0c4ae32f34d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://t.me/cvedetector/23199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0756 - Hitachi Vantara Pentaho Unrestricted JNDI Identifier Vulnerability (CWE-99)\", \n  \"Content\": \"CVE ID : CVE-2025-0756 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview   \n  \n  \n  \n\u00a0  \n  \n  \n  \nThe product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99)   \n  \n  \n  \n\u00a0  \n  \n  \n  \nDescription   \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Data Integration &amp; Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not restrict JNDI identifiers during the creation of platform data sources.   \n  \n  \n  \n\u00a0  \n  \n  \n  \nImpact   \n  \n  \n  \n\u00a0  \n  \n  \n  \nAn attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:36.000000Z"}, {"uuid": "6ab69759-e104-405a-a89d-b248857b974b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0783", "type": "seen", "source": "https://t.me/cvedetector/16618", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0783 - Pankajindevops API Endpoint Remote Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0783 \nPublished : Jan. 28, 2025, 7:15 p.m. | 19\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an unknown part of the component API Endpoint. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T21:17:44.000000Z"}, {"uuid": "7592719a-18b7-4bf3-a55e-d38b527991f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://t.me/cvedetector/23195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0758 - Hitachi Vantara Pentaho Business Analytics Server JMX Bean Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-0758 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview\u00a0  \n  \n  \n  \nThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732)\u00a0  \n  \n  \n  \nDescription\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default.\u00a0  \n  \n  \n  \nImpact\u00a0  \n  \n  \n  \nWhen the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:30.000000Z"}, {"uuid": "9eafcd2e-7cba-4196-954b-b083ced69bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://t.me/cvedetector/16601", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0781 - FSFlight Tracker Nasal Privilege Escalation RCE\", \n  \"Content\": \"CVE ID : CVE-2025-0781 \nPublished : Jan. 28, 2025, 5:15 p.m. | 18\u00a0minutes ago \nDescription : An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T18:47:09.000000Z"}, {"uuid": "57cca952-0e1a-4d5e-a66f-28cb6de83b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0736", "type": "seen", "source": "https://t.me/cvedetector/16594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0736 - \"Infinispan JGroups Versionendez Information Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2025-0736 \nPublished : Jan. 28, 2025, 9:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently exposes sensitive information, such as configuration details or credentials, through logging mechanisms. This exposure can lead to unauthorized access and exploitation by malicious actors. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:19.000000Z"}, {"uuid": "de360b66-22cf-4bbf-aba4-3994380e5eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/cvedetector/16591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0754 - Apache OpenShift Service Mesh HTTP Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0754 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:14.000000Z"}, {"uuid": "38cb42e0-c87a-4c3e-bc2c-33b56acf5a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/cvedetector/16590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0752 - OpenShift Service Mesh Envoy HTTP Header Sanitization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0752 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:13.000000Z"}, {"uuid": "679fb1ca-d8c9-483b-b74b-b21d2e154f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/cvedetector/16589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0750 - CRI-O Node-Level Privilege Escalation Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0750 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:12.000000Z"}, {"uuid": "30fa5b37-e31a-4ea9-a3c9-d682f8d892fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://t.me/cvedetector/22231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2258 - Eclipse ThreadX NetX Duo HTTP Server Integer Underflow Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2258 \nPublished : April 6, 2025, 7:15 p.m. | 2\u00a0hours, 48\u00a0minutes ago \nDescription : In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.3, an attacker can cause an integer underflow and a   \nsubsequent denial of service by writing a very large file, by specially   \ncrafted packets with Content-Length smaller than the data request size. A  \n possible workaround is to disable HTTP PUT support.  \n  \n  \n  \n  \nThis issue follows an uncomplete fix in CVE-2025-0728. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T00:20:11.000000Z"}, {"uuid": "f5aaf261-d313-4ecb-be32-1115e4000400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "https://t.me/cvedetector/22230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2260 - Eclipse ThreadX NetX Duo HTTP Server Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2260 \nPublished : April 6, 2025, 7:15 p.m. | 2\u00a0hours, 48\u00a0minutes ago \nDescription : In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.3, an attacker can cause a denial of service by specially   \ncrafted packets. The core issue is missing closing of a file in case of   \nan error condition, resulting in the 404 error for each further file   \nrequest. Users can work-around the issue by disabling the PUT request   \nsupport.  \n  \n  \n  \n  \nThis issue follows an incomplete fix of CVE-2025-0726. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T00:20:07.000000Z"}, {"uuid": "d9d1e27c-3336-4080-821c-e746d57350d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "https://t.me/cvedetector/22229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2259 - Eclipse ThreadX NetX Duo HTTP Server Integer Underflow Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-2259 \nPublished : April 6, 2025, 7:15 p.m. | 2\u00a0hours, 48\u00a0minutes ago \nDescription : In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before   \nversion 6.4.3, an attacker can cause an integer underflow and a   \nsubsequent denial of service by writing a very large file, by specially   \ncrafted packets with Content-Length in one packet smaller than the data   \nrequest size of the other packet. A possible workaround is to disable   \nHTTP PUT support.  \n  \n  \n  \n  \nThis issue follows an incomplete fix of CVE-2025-0727 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T00:20:07.000000Z"}, {"uuid": "de7bab95-6d02-4b69-aa68-ff088432542a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/cvedetector/20559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0755 - MongoDB BSON Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-0755 \nPublished : March 18, 2025, 9:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16 \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T11:53:23.000000Z"}, {"uuid": "5b9831ab-ffca-430c-8040-8037a560dafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0724", "type": "seen", "source": "https://t.me/cvedetector/20851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0724 - ProfileGrid WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0724 \nPublished : March 22, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The ProfileGrid \u2013 User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.9.4.5 via deserialization of untrusted input in the get_user_meta_fields_html function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T08:42:02.000000Z"}, {"uuid": "80701df7-c628-4b64-a607-1dab6c43bdf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0717", "type": "seen", "source": "https://t.me/cvedetector/21065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0717 - Apache HTTP Server XML External Entity (XXE) Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0717 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : To exploit the vulnerability, it is necessary: \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:42.000000Z"}, {"uuid": "8fde950e-9d49-4847-8516-6d6728738d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "https://t.me/cvedetector/16505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0751 - Axiomatic Bento4 Heap-Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0751 \nPublished : Jan. 27, 2025, 8:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T21:51:58.000000Z"}, {"uuid": "52892122-03ae-4c02-9fb3-db6bede9d1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0718", "type": "seen", "source": "https://t.me/cvedetector/20892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0718 - WordPress Nested Pages Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0718 \nPublished : March 23, 2025, 6:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-23T09:47:47.000000Z"}, {"uuid": "4dab875b-f0d9-4745-b0e0-e4cba216f652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0723", "type": "seen", "source": "https://t.me/cvedetector/20850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0723 - ProfileGrid WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0723 \nPublished : March 22, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : The ProfileGrid \u2013 User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-22T08:42:01.000000Z"}, {"uuid": "ebbaefef-7a72-4323-95c0-93b56c730856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0730", "type": "seen", "source": "https://t.me/cvedetector/16497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0730 - \"TP-Link TL-SG108E Unauthenticated HTTP GET Request Handler Remote Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0730 \nPublished : Jan. 27, 2025, 5:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument username/password leads to use of get request method with sensitive query strings. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0 Build 20250124 Rel. 54920(Beta) is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early. They reacted very professional and provided a pre-fix version for their customers. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:31.000000Z"}, {"uuid": "46b7f31d-507b-41d4-8fec-dd8217c19915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0733", "type": "seen", "source": "https://t.me/cvedetector/16494", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0733 - Postman Windows Profapi.dll Untrusted Search Path Local Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0733 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:26.000000Z"}, {"uuid": "1068e2fe-9059-4e2b-bbd8-6cc6d29c62d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0732", "type": "seen", "source": "https://t.me/cvedetector/16493", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0732 - Discord Profapi.dll Untrusted Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0732 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Discord up to 1.0.9177 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to untrusted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:25.000000Z"}, {"uuid": "5a420579-93d4-4489-b9d0-43b61e090ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "Telegram/JmZL6HfJEWDyKx7kicaSOJ8gP19bpGfV75hu0-viSdkUO978", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "498c903c-314f-4ff5-a9b7-ba09eb342177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0727", "type": "seen", "source": "Telegram/plbAtNbGAnz4cUo00JgCyxV90iw3zrZBX9WicDxJCew1z9qJ", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "1320bf4d-2bd7-42f0-8214-fcb661d81baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "seen", "source": "Telegram/G5MT6tH_UlEGnmLnPviXJE6E1wZo7TqiWatrGExImHQg9SWx", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "1d43b8de-ba6a-4631-a35e-8d91f59ad421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "Telegram/ulMrjTa9MUnUcmXdf7ZsJt7qbIZdVL9FakXD0wGnuH-AcOK-", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "dce028da-9388-41fd-8c1f-01434af2eb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "Telegram/dq7_qWKSEDoXtZS2s8rG0rHMuliORmxVJtQRm4LHEc3wAXkg", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "efcc2139-243b-4e58-8abc-914b7febc88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "Telegram/rpwmbOltjKQW1JY0BjTFW_-aZSJyTmPdmCDXFWsnvWA70if2", "content": "", "creation_timestamp": "2025-02-19T15:39:53.000000Z"}, {"uuid": "90959739-3c3b-4cc4-b148-c8dcd4ef812d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "Telegram/rxUIoj95j6ZQ7ioxwMAZqJ54YP5sybspgek-jmCIDKKC-quU", "content": "", "creation_timestamp": "2025-02-14T10:01:39.000000Z"}, {"uuid": "1f643073-6e4c-4cf7-a9ac-a717e8daf861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0799", "type": "seen", "source": "Telegram/tPcStzjb_z4-OmyrvIfFbJ__L5VwBNk8O9RyywR9QzPBVG4G", "content": "", "creation_timestamp": "2025-02-06T02:44:21.000000Z"}, {"uuid": "b6aeafcd-c768-40e7-860a-b99df9e83bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "Telegram/fSuwXRClEdmEZn4DIJCoPo5Pyd4dhHHZXUZq-AhNlY7pMPa5", "content": "", "creation_timestamp": "2025-02-06T02:43:28.000000Z"}, {"uuid": "f7dee849-48d8-4f05-ba15-3e8e3ac5657a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0798", "type": "published-proof-of-concept", "source": "Telegram/__90Mp0Rvt99JAd3XmDTMRls0v98qBw_5XQu0q-N8kQJzto", "content": "", "creation_timestamp": "2025-01-29T04:31:10.000000Z"}, {"uuid": "06b9925e-fa09-4b4d-8c5c-8866c258ca29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "Telegram/rDwGYm_YlfffaArRRWY262eYU245nTmzaz50xTQLFqY_c5s", "content": "", "creation_timestamp": "2025-03-07T04:01:04.000000Z"}, {"uuid": "feeb5318-2a66-4994-b0f7-8def6a9f5491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0726", "type": "published-proof-of-concept", "source": "Telegram/ovbtZKoroWRTUmp0mBAhDILdax9lr2tflhGI-LGMG8-Ufts", "content": "", "creation_timestamp": "2025-02-21T10:00:21.000000Z"}, {"uuid": "b355155f-4294-4d6e-88c7-13a685bb0843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0724", "type": "seen", "source": "Telegram/lKJR0gVbJMQmQvPZvyO2PQYEgFjbPQAZ3O_ktOvkr7WqN9Q", "content": "", "creation_timestamp": "2025-03-22T06:00:36.000000Z"}, {"uuid": "46ebb5a0-194c-48c2-ad4e-f32080368b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "Telegram/AvU4s6yOC3nA161VoyJsZ4kNiYeawgOi5ItlSrMJGz_cKJo", "content": "", "creation_timestamp": "2025-03-18T11:00:18.000000Z"}, {"uuid": "a645c317-70c6-4b9d-90b8-27d593603ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0782", "type": "seen", "source": "https://t.me/cvedetector/24376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0782 - H2O-3 S3 Bucket Public Write Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0782 \nPublished : May 2, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability could lead to remote code execution (RCE) on any user who uses the application. Additionally, an attacker could modify the documentation to include malicious download links. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T00:19:11.000000Z"}, {"uuid": "4bf40d55-516d-4d33-9642-e56865e61cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://gist.github.com/kipavy/910e7ddc8efea7aeb9202c0241486a1d", "content": "#!/usr/bin/env python3\n\"\"\"\nMobaXterm v25+/v26 password decryptor  (handles CVE-2025-0714 random-IV format).\n\nOlder tools (HyperSine, XMCyber, clemthi) assume a fixed IV = AES-ECB(key, 0).\nMobaXterm &gt;= 25.0 switched to a random per-password IV stored inline. Format:\n\n    stored = \"_@\" + IV(16 chars) + base64(AES-256-CFB8(key, IV, password))\n\n  key  = SHA512(master_password)[:32]\n  IV   = the 16 ASCII characters right after the \"_@\" marker (used as the AES IV bytes)\n  body = base64-decode the FULL stored string (alphabet @-&gt;+, _-&gt;/), then drop the\n         first 15 bytes -&gt; the CFB8 ciphertext of the password.\n\nThis script auto-derives the key from the DPAPI-protected master-password hash in the\nregistry (so you don't even need to type the master password), then decrypts the\nP (session passwords) and C (credentials) subkeys.\n\nRequires: pycryptodome  (pip install pycryptodome)\nWindows only (reads HKCU and uses DPAPI).\n\"\"\"\nimport os, sys, platform, base64, hashlib, itertools, winreg, ctypes\nfrom ctypes import wintypes\nfrom Crypto.Cipher import AES\n\nREG_BASE = r'Software\\Mobatek\\MobaXterm'\nDPAPI_HEADER = bytes.fromhex('01000000d08c9ddf0115d1118c7a00c04fc297eb')\n\n\n# ---- DPAPI (CryptUnprotectData) via Win32, with optional entropy ----\nclass DATA_BLOB(ctypes.Structure):\n    _fields_ = [('cbData', wintypes.DWORD), ('pbData', ctypes.POINTER(ctypes.c_char))]\n\ndef _blob(data: bytes) -&gt; DATA_BLOB:\n    buf = ctypes.create_string_buffer(data, len(data))\n    return DATA_BLOB(len(data), ctypes.cast(buf, ctypes.POINTER(ctypes.c_char)))\n\ndef dpapi_unprotect(data: bytes, entropy: bytes) -&gt; bytes:\n    pin, pent, pout = _blob(data), _blob(entropy), DATA_BLOB()\n    if not ctypes.windll.crypt32.CryptUnprotectData(\n            ctypes.byref(pin), None, ctypes.byref(pent), None, None, 0, ctypes.byref(pout)):\n        raise ctypes.WinError()\n    out = ctypes.string_at(pout.pbData, pout.cbData)\n    ctypes.windll.kernel32.LocalFree(pout.pbData)\n    return out\n\n\ndef derive_key_from_registry() -&gt; bytes:\n    \"\"\"Derive the AES key from the DPAPI-protected master-password hash (no typing needed).\"\"\"\n    base = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE)\n    session_p, _ = winreg.QueryValueEx(base, 'SessionP')\n    m = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + r'\\M')\n    val, _ = winreg.QueryValueEx(m, os.getlogin() + '@' + platform.node())\n    blob = DPAPI_HEADER + base64.b64decode(val)\n    master_hash = dpapi_unprotect(blob, str(session_p).encode('utf-8'))\n    return base64.b64decode(master_hash)[:32]\n\n\ndef derive_key_from_password(master_password: str) -&gt; bytes:\n    return hashlib.sha512(master_password.encode('utf-8')).digest()[:32]\n\n\ndef decrypt_value(key: bytes, stored: str) -&gt; bytes:\n    \"\"\"Decrypt one MobaXterm v25+/v26 stored password string.\"\"\"\n    if not stored.startswith('_@'):\n        # Old (&lt;=v24) format: full string is base64 (@-&gt;+,_-&gt;/), fixed IV = ECB(key,0)\n        ct = base64.b64decode(stored, altchars=b'@_')\n        iv = AES.new(key=key, mode=AES.MODE_ECB).encrypt(b'\\x00' * 16)\n        return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(ct)\n    iv = stored[2:18].encode('latin1')              # 16 chars after _@ = AES IV\n    body = base64.b64decode(stored, altchars=b'@_')[15:]\n    return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(body)\n\n\ndef _decode(b: bytes) -&gt; str:\n    try:\n        return b.decode('utf-8')\n    except UnicodeDecodeError:\n        return b.decode('latin1')\n\n\ndef enum_values(subkey: str):\n    try:\n        k = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + '\\\\' + subkey)\n    except FileNotFoundError:\n        return\n    for i in itertools.count(0):\n        try:\n            yield winreg.EnumValue(k, i)[:2]\n        except OSError:\n            break\n\n\ndef main():\n    if platform.system().lower() != 'windows':\n        sys.exit('Windows only.')\n    try:\n        key = derive_key_from_registry()\n        print('[+] AES key derived from registry master-password hash.\\n')\n    except Exception as e:\n        pw = input('Could not auto-derive key (%s).\\nEnter MobaXterm master password: ' % e)\n        key = derive_key_from_password(pw)\n\n    print('=== Session passwords (P) ===')\n    for name, value in enum_values('P'):\n        print(f'  {name:&lt;32} {_decode(decrypt_value(key, value))!r}')\n\n    creds = list(enum_values('C'))\n    if creds:\n        print('\\n=== Credentials (C) ===')\n        for name, value in creds:\n            user, _, enc = value.partition(':')\n            print(f'  {name:&lt;20} user={user!r:&lt;14} {_decode(decrypt_value(key, enc))!r}')\n\n\nif __name__ == '__main__':\n    main()\n", "creation_timestamp": "2026-05-30T13:57:01.000000Z"}, {"uuid": "4e4d6298-df5e-4d7b-8997-541885079063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mon6tcwdwj2g", "content": "\ud83d\udea8 EUVD-2026-37999\n\ud83d\udcca 7.5/10\n\ud83c\udfe2 Eclipse Foundation\n\n\ud83d\udcdd The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup ...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37999\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-19T11:00:15.721087Z"}, {"uuid": "0ff219b7-a00b-43cd-8788-5f631e5883f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monbwwekfi2r", "content": "CVE-2026-11576 - eclipse-threadx NetX Duo HTTP Server fx_file_close Uninitialized Handle Vulnerability\nCVE ID : CVE-2026-11576\n \n Published : June 19, 2026, 8:27 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refac...", "creation_timestamp": "2026-06-19T11:55:58.532320Z"}, {"uuid": "686fa252-6443-421e-8aba-b9fbc6e1e80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.761127Z"}, {"uuid": "3f5057da-8dbc-4edc-b13f-eb32c9b081af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.112524Z"}]}