{"vulnerability": "2025-18", "sightings": [{"uuid": "676381d2-24f5-48c4-b978-9352eae71536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d", "content": "", "creation_timestamp": "2025-03-14T18:23:03.484216Z"}, {"uuid": "54c33158-ea5b-46bd-b8bf-a8e6f1195481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6huenfs2a", "content": "", "creation_timestamp": "2025-03-07T14:05:01.090020Z"}, {"uuid": "47d68792-012c-4e2a-b578-2865a690ac8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6huseho2b", "content": "", "creation_timestamp": "2025-03-07T14:05:02.723309Z"}, {"uuid": "0d81046c-8b1c-4fdd-9bb8-5d4e702604dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1876", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114098509796592852", "content": "", "creation_timestamp": "2025-03-03T12:31:33.780613Z"}, {"uuid": "e91d3f66-b07b-4b12-8279-132d14c5e334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhy4ue6ok27", "content": "", "creation_timestamp": "2025-03-03T12:44:51.092027Z"}, {"uuid": "0f8de39c-5736-473a-acf7-58e0d5c5c673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhy4uujf226", "content": "", "creation_timestamp": "2025-03-03T12:44:51.834225Z"}, {"uuid": "2b1d5402-7c9f-471a-8405-3b0ee2c602a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhy4uz4t622", "content": "", "creation_timestamp": "2025-03-03T12:44:52.376248Z"}, {"uuid": "302fb384-b794-4490-a8dc-1a44dd510a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljfgj4ed5c2v", "content": "", "creation_timestamp": "2025-03-02T12:24:15.265513Z"}, {"uuid": "756f1398-f045-4aa9-b122-9b5cca364a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1867", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114098903416347957", "content": "", "creation_timestamp": "2025-03-03T14:11:40.166110Z"}, {"uuid": "9cc1d289-a3f4-4707-8954-31877ec08a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljfgj4ured2b", "content": "", "creation_timestamp": "2025-03-02T12:24:16.114713Z"}, {"uuid": "aa49e784-6de1-4a62-8811-61d18350117c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1866", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114098916879009704", "content": "", "creation_timestamp": "2025-03-03T14:15:05.445785Z"}, {"uuid": "dd0d1f8a-fa64-4a76-9a01-590397d1bfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljfgj55vnk22", "content": "", "creation_timestamp": "2025-03-02T12:24:16.809985Z"}, {"uuid": "72da2bbe-4457-437b-be21-a84847540968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114098936395298081", "content": "", "creation_timestamp": "2025-03-03T14:20:03.409413Z"}, {"uuid": "d54baa51-ddfb-4dfc-b610-a942f171da2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljfgj5fdmt2i", "content": "", "creation_timestamp": "2025-03-02T12:24:17.507979Z"}, {"uuid": "4cc19139-988a-44d8-9861-e06c3dbfb6af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114098960922097363", "content": "", "creation_timestamp": "2025-03-03T14:26:20.668658Z"}, {"uuid": "ef860f5a-cbc8-4de3-bbd2-619d5d137ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1842", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114099003222440647", "content": "", "creation_timestamp": "2025-03-03T14:37:03.049268Z"}, {"uuid": "c5986b47-55ae-4e47-9517-5964b7aeb7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114093149027932934", "content": "", "creation_timestamp": "2025-03-02T13:48:15.628143Z"}, {"uuid": "24667bfb-fb34-4af1-b9fe-10a4c5c8ffff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3ljic7fivxs2g", "content": "", "creation_timestamp": "2025-03-03T15:45:16.042177Z"}, {"uuid": "3fef762e-dad2-4899-99da-5a273d3f0ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114141752702527373", "content": "", "creation_timestamp": "2025-03-11T03:48:48.326408Z"}, {"uuid": "ecd9077c-1938-467d-93ec-4c62da66ff54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27", "content": "", "creation_timestamp": "2025-03-14T06:25:41.460712Z"}, {"uuid": "57346368-5ba5-48dc-a30a-6dd2affc783c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3ljt34porps22", "content": "", "creation_timestamp": "2025-03-07T22:37:44.946491Z"}, {"uuid": "e193f557-8f58-46b1-8633-6551a2251b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1801", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114099640939996740", "content": "", "creation_timestamp": "2025-03-03T17:19:13.811713Z"}, {"uuid": "c67cd074-6478-458c-bb4d-d4fe4f8dc387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1801", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114099758293626776", "content": "", "creation_timestamp": "2025-03-03T17:49:05.494945Z"}, {"uuid": "46fe34ac-733c-45ec-9ece-338bfaeb6c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljftnutihz26", "content": "", "creation_timestamp": "2025-03-02T16:19:34.161263Z"}, {"uuid": "ce3e0e33-760c-48bb-9130-0261d675c77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljftnv7oa622", "content": "", "creation_timestamp": "2025-03-02T16:19:34.930274Z"}, {"uuid": "58392568-bbfd-43c1-838b-4ae462a1f367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3gnqzmvz2s", "content": "", "creation_timestamp": "2025-03-11T06:25:25.352702Z"}, {"uuid": "70798eda-803a-4392-8e97-668268b8d282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljftnvgos42x", "content": "", "creation_timestamp": "2025-03-02T16:19:35.572915Z"}, {"uuid": "ca5b2bc8-0f39-479e-95df-1a22b8268bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7azahr23", "content": "", "creation_timestamp": "2025-03-03T20:49:27.902091Z"}, {"uuid": "2532bb35-4f4d-4dba-a4ce-ae81f4091d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7b7tem2b", "content": "", "creation_timestamp": "2025-03-03T20:49:29.109834Z"}, {"uuid": "3ed45f8a-3a16-4bae-85db-dfaf057b89d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1878", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100690253927235", "content": "", "creation_timestamp": "2025-03-03T21:46:05.250665Z"}, {"uuid": "09032001-50d9-4ad9-85c0-ec4d56ffe0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1881", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100690253927235", "content": "", "creation_timestamp": "2025-03-03T21:46:05.444546Z"}, {"uuid": "61533b77-f03e-41dd-87a6-f7e1bd2724c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1879", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100690253927235", "content": "", "creation_timestamp": "2025-03-03T21:46:05.322305Z"}, {"uuid": "6cffe4dc-4995-44f4-9686-342ee4758563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1882", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100690253927235", "content": "", "creation_timestamp": "2025-03-03T21:46:05.507072Z"}, {"uuid": "36c02b42-9a74-472f-81d9-e1b774fdc711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1880", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114100690253927235", "content": "", "creation_timestamp": "2025-03-03T21:46:05.392227Z"}, {"uuid": "18faf802-82ea-489c-954a-d0a808f9a28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkn5b43pwc2d", "content": "", "creation_timestamp": "2025-03-18T07:25:13.028926Z"}, {"uuid": "997617a1-b237-4c7d-b74c-483481febbb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yihxnd2v", "content": "", "creation_timestamp": "2025-03-03T23:44:34.818602Z"}, {"uuid": "9a01c37d-ecc6-4d80-af89-cb881a596bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yili252a", "content": "", "creation_timestamp": "2025-03-03T23:44:35.425689Z"}, {"uuid": "bd7a3628-485e-4932-ad44-7869dda261c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yiozvx2o", "content": "", "creation_timestamp": "2025-03-03T23:44:36.053403Z"}, {"uuid": "4c556be9-a2a3-44d5-8fb3-5f54ae647dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljj4yisjg722", "content": "", "creation_timestamp": "2025-03-03T23:44:36.734494Z"}, {"uuid": "6dd9695f-0903-4b2f-a705-985ca17d0a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114105890342072062", "content": "", "creation_timestamp": "2025-03-04T19:48:32.540660Z"}, {"uuid": "984e7978-65aa-4f3d-ae47-d161b962f1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114094699549921161", "content": "", "creation_timestamp": "2025-03-02T20:22:34.082435Z"}, {"uuid": "b513d504-4070-403f-8c9f-11826442fb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1819", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgbljze2x22", "content": "", "creation_timestamp": "2025-03-02T20:28:48.218000Z"}, {"uuid": "dcba032d-4755-4bf4-925a-16b3cbce950d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgblk5cw322", "content": "", "creation_timestamp": "2025-03-02T20:28:48.769080Z"}, {"uuid": "08ea113f-eb47-4f6b-b5f2-f9fd9581ca54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgblkbrbo2a", "content": "", "creation_timestamp": "2025-03-02T20:28:49.320010Z"}, {"uuid": "2fec66cf-531a-4ff3-99d2-a33f4607ee31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgblkm6t523", "content": "", "creation_timestamp": "2025-03-02T20:28:50.036574Z"}, {"uuid": "7477061e-eb1d-43ab-8dbc-c2b71698a317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114094754589427815", "content": "", "creation_timestamp": "2025-03-02T20:36:33.943554Z"}, {"uuid": "c872f648-5ded-4955-aeb9-059862f973e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114094807942381490", "content": "", "creation_timestamp": "2025-03-02T20:50:08.200655Z"}, {"uuid": "b694bf3d-bbf0-4aec-aed1-68139095c485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgm7lxycx22", "content": "", "creation_timestamp": "2025-03-02T23:38:58.324240Z"}, {"uuid": "42ac8152-613d-4b1e-b285-4dd2d2da4fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgm7n7kbk23", "content": "", "creation_timestamp": "2025-03-02T23:38:59.763696Z"}, {"uuid": "7a436cd8-b488-4ac9-a463-0e826ac95162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1832", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgm7nsqxh22", "content": "", "creation_timestamp": "2025-03-02T23:39:00.568394Z"}, {"uuid": "88243655-e7c3-4d5c-9a18-7157d1812684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvyrxisc2o", "content": "", "creation_timestamp": "2025-03-03T02:34:07.650390Z"}, {"uuid": "4c38d7a2-4c0d-4899-b97a-d738f6013a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1841", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvysg2og2i", "content": "", "creation_timestamp": "2025-03-03T02:34:08.618311Z"}, {"uuid": "a7c35b31-9f31-4a12-8b61-5c24d1bde5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvysqkkk2o", "content": "", "creation_timestamp": "2025-03-03T02:34:09.545025Z"}, {"uuid": "e06559f6-fbf1-4765-96a4-2948a7666511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmo3nvr27", "content": "", "creation_timestamp": "2025-03-04T02:54:47.560109Z"}, {"uuid": "e80c6272-9c17-4e8f-a4e5-3983b3771355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvysxx7u26", "content": "", "creation_timestamp": "2025-03-03T02:34:10.692299Z"}, {"uuid": "2b8e6e66-1000-4905-922a-cd1d77c05380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1836", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvyt3jpk2b", "content": "", "creation_timestamp": "2025-03-03T02:34:11.301960Z"}, {"uuid": "a5d72a2a-3632-4300-a3bd-6e8a34bf0a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjhmohuii2n", "content": "", "creation_timestamp": "2025-03-04T02:54:49.206366Z"}, {"uuid": "98ce7dd9-2dc8-4327-beeb-002e5974af6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljgvytaub62v", "content": "", "creation_timestamp": "2025-03-03T02:34:12.005171Z"}, {"uuid": "c1d720de-afa9-41d2-bcb0-c5af61fad750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114091703199818280", "content": "", "creation_timestamp": "2025-03-02T07:40:33.745066Z"}, {"uuid": "5ae75813-4fec-4c8c-b183-c962be4bf551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljh4ymcdfp27", "content": "", "creation_timestamp": "2025-03-03T04:39:20.490518Z"}, {"uuid": "6a05888e-27dd-4941-b3c0-658055b0bca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114097397569899499", "content": "", "creation_timestamp": "2025-03-03T07:48:42.778558Z"}, {"uuid": "e55e32b4-5bb0-4ec1-8842-a8b7436b4611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114097397607434510", "content": "", "creation_timestamp": "2025-03-03T07:48:44.014767Z"}, {"uuid": "edc7ec17-e693-4e60-91e3-98c79875c384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114097397644053003", "content": "", "creation_timestamp": "2025-03-03T07:48:44.208856Z"}, {"uuid": "81284b78-a34b-497a-8bbd-3478e315df68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114097623114593596", "content": "", "creation_timestamp": "2025-03-03T08:46:04.069167Z"}, {"uuid": "6763b88f-6594-4407-a260-13d7a0339b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6ccoj2b", "content": "", "creation_timestamp": "2025-03-03T08:49:35.103536Z"}, {"uuid": "23092b00-0124-4b94-a89b-87adfbd9e1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6lma52v", "content": "", "creation_timestamp": "2025-03-03T08:49:36.117578Z"}, {"uuid": "7652e010-6b9c-4300-a057-c7b3c5d3e13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1815", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114092126136384564", "content": "", "creation_timestamp": "2025-03-02T09:28:07.668925Z"}, {"uuid": "f7b0d090-4032-490e-9f76-87b667bc8035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llyich6c7c2w", "content": "", "creation_timestamp": "2025-04-04T13:07:17.479596Z"}, {"uuid": "60a1ce52-5a7e-461c-945e-f07c63fd0eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04", "content": "", "creation_timestamp": "2025-04-17T10:00:00.000000Z"}, {"uuid": "f55a4726-af70-4fd2-9258-235d2f173806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114359095187784326", "content": "", "creation_timestamp": "2025-04-18T13:01:51.401968Z"}, {"uuid": "ea9ffd7c-0e33-42cb-8038-ca24f8397a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114360221143907102", "content": "", "creation_timestamp": "2025-04-18T17:48:12.324580Z"}, {"uuid": "be4d4498-e87c-498f-9d96-1d5c593284ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln47nvgna42d", "content": "", "creation_timestamp": "2025-04-18T18:08:28.416452Z"}, {"uuid": "1b1d6fd9-3042-4069-8a27-e810d64707aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lngvylia7k2x", "content": "", "creation_timestamp": "2025-04-23T00:14:51.178057Z"}, {"uuid": "e764bdcc-8082-4145-ad4d-bdd6fa25c13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "seen", "source": "https://bsky.app/profile/heinen.bsky.social/post/3lqx4tebpgk2o", "content": "", "creation_timestamp": "2025-06-06T15:15:20.267256Z"}, {"uuid": "b16cbec5-4ee2-4ac8-9403-d7e271105486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1883", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114438937610533726", "content": "", "creation_timestamp": "2025-05-02T15:26:50.113078Z"}, {"uuid": "126da414-89af-4203-a775-d3bc5a34974b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1884", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114438937610533726", "content": "", "creation_timestamp": "2025-05-02T15:26:50.212916Z"}, {"uuid": "7b93c615-bf43-4e4e-a56b-d0de37a19928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1884", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo77gviurwt2", "content": "", "creation_timestamp": "2025-05-02T16:15:18.146016Z"}, {"uuid": "61d54700-ccd5-4063-863c-5011ef45a98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1883", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo77ha2ozmk2", "content": "", "creation_timestamp": "2025-05-02T16:15:18.833068Z"}, {"uuid": "7b6423bf-e4f1-424c-9d9a-b30dc77f2a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7frg5zcw2j", "content": "", "creation_timestamp": "2025-05-02T18:01:02.544436Z"}, {"uuid": "dd5a4c1b-609a-4aa1-9902-1868c104973a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7frgbdel2p", "content": "", "creation_timestamp": "2025-05-02T18:01:03.162935Z"}, {"uuid": "03cc5e68-a03c-49e4-9965-1a9333beebd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1838", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobytw7omcf2", "content": "", "creation_timestamp": "2025-05-03T19:40:38.126921Z"}, {"uuid": "d478f9f9-fb67-4017-be9f-dfa191a31fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3locdx3yki22w", "content": "", "creation_timestamp": "2025-05-03T22:06:22.396285Z"}, {"uuid": "c5569b0c-68b7-46aa-9c93-00d12840ffd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1883", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-286/", "content": "", "creation_timestamp": "2025-05-13T03:00:00.000000Z"}, {"uuid": "b47b8d76-3218-4b86-be73-065944a9c33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1884", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-285/", "content": "", "creation_timestamp": "2025-05-13T03:00:00.000000Z"}, {"uuid": "daa120af-7cff-4320-91fe-6853ab3d2c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1849", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmbqqf2v", "content": "", "creation_timestamp": "2025-10-16T21:02:43.792213Z"}, {"uuid": "e423973c-3106-4a5d-b6e9-70026633d4df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "355bcd9b-b91b-4111-98be-010cd54a05e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "4bddc31a-0c01-407d-b912-7a5163fc150d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:15.000000Z"}, {"uuid": "ab31a0ae-e9f0-4cc3-81ad-2bcac7eab438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1854", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:15.000000Z"}, {"uuid": "8e788768-33ca-4aeb-9a61-926c186e6e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1856", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "78cc0996-6447-4fed-97fb-0c3af03de042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "68075246-1372-4205-b112-2c9853ebc2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1873", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "e3e09678-f4ae-44ad-9961-834b385eecf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:50.000000Z"}, {"uuid": "6179d269-e5aa-41e3-baee-ae89eebb08dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:24.000000Z"}, {"uuid": "8c4c920d-ca1a-4fb0-a6c2-e46f68309322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1856", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:42.000000Z"}, {"uuid": "f7e25fab-366f-4f03-b639-5c8dcee3939c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:42.000000Z"}, {"uuid": "49138ca0-b50b-4fa4-9db5-d53ddcb1f837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1873", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:47.000000Z"}, {"uuid": "5e671e2b-bb8f-45c9-8ca7-5ca606459fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:47.000000Z"}, {"uuid": "11b020a3-79c3-40de-b70f-f64c9ef11f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:35.000000Z"}, {"uuid": "f0c6ec35-6bd1-4c52-aa32-38b269167f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1854", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:37.000000Z"}, {"uuid": "0b3b8363-0d13-4384-b9c8-5cf39777ce0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "7e766a46-7bbb-4670-b43b-859ae12b4c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1831", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "3520b104-53bd-4767-be87-d2fdf1886473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1834", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a72224b6-3c7b-41aa-b792-fcc417ec4a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1832", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "e09c3499-76c3-46f1-83e7-9e87a089e4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1836", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a63a536e-246f-4164-a0d6-ca17aca60336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1835", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "433b1887-9745-43be-a21e-bc1f4476b9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1833", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "36557a82-8896-4ea9-88ec-987e8d72db04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1848", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "716ae18c-5f8e-47eb-ba91-bca2767c6f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "9f90944f-7e6f-468b-a5a7-c0eeb3f53aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1813", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "65293b93-9bf5-40cd-9b40-87c876a20341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "81034e97-c954-4cb0-8890-4943d95e77cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1812", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "b5c417b8-2ef9-4f7b-b705-5c24de21780f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1817", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "078bd1a9-f069-4c17-b045-4f4ca33fd338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1818", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "b35333b5-f272-4c49-8cec-5a3b830645c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1820", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "8bb0e322-ffe1-48dd-8845-b8e42ec3ffeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1840", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a8853ca2-3cb3-4942-af9e-ec223463559c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1845", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "b3145683-bbea-4805-9a67-a98f391d8840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1844", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a4a73429-89ec-4246-9e42-1b5e25e93737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1846", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "c12315ff-6fae-4ae2-8ae0-0873f25446aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1847", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "7e06c1ff-c211-44e6-a7da-774ea80b343b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "44f47d30-14ee-4efe-a6c4-3862bee3d5bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "c8a92e15-d1e8-46a3-925e-c3ea9420e340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1807", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "88cc710f-9a0d-4785-8efa-a5431ac745ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1808", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:29.000000Z"}, {"uuid": "01e3b1da-769b-4fd6-ab57-39c47f3a2b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "1c6c3f5d-c11c-49f5-b150-170c560141de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1876", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "48b7af9f-8d75-4e0c-bc6a-192c3567cdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1877", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "3eb97d85-7e3e-4aee-b2a0-9bdf0f1ce338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "1f869d23-67f6-4759-9128-e37bc8804650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1890", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "c252c730-5a73-4a04-89d3-43dafb85d70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1892", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "9b299934-ec81-401d-87a0-3104692a417b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1894", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "978835c6-7126-444f-a613-1dfc54e7177c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1895", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "1b0c0754-b644-4299-8fdc-2d426a74f9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1897", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "82a623e9-2524-48c1-b962-e5016b1abe5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1896", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "837a9fb3-e4db-48e1-9cd9-1217b1402603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1899", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "25a8a6c5-2654-4bfa-a37c-3827fab176b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1866", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "29c1a14b-d217-4e83-a1f1-0a0cc6acd38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "f24b074b-900d-4dde-9368-58d55b53ce3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1821", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "ddcf3eee-1270-4781-ad19-4c372c39d743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1830", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "05806ae7-49e5-4c41-8740-fb7c06dd8077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "content": "", "creation_timestamp": "2025-10-11T06:19:00.904836Z"}, {"uuid": "40c5f867-5f29-4f82-8e65-797d13f9a9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-18320", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m46thkveyc2u", "content": "", "creation_timestamp": "2025-10-27T16:26:07.956125Z"}, {"uuid": "aa8a9277-b7bf-42da-b5bb-ba7f167c5b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mbuoezhani2b", "content": "", "creation_timestamp": "2026-01-07T23:59:43.730593Z"}, {"uuid": "9e8e67b9-9ba5-4490-96dd-388913d2c0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1881", "type": "seen", "source": "https://t.me/cvedetector/19411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1881 - i-Drive Remote Improper Access Controls Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1881 \nPublished : March 3, 2025, 9:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotely. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:16.000000Z"}, {"uuid": "f1b0b053-c763-48ce-83e9-7ab27a3679c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "seen", "source": "https://t.me/cvedetector/19432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1891 - Shishuocms Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1891 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:54.000000Z"}, {"uuid": "702ae775-8dfd-4f4d-bedf-c15518fa50ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "published-proof-of-concept", "source": "Telegram/G9A3JE8E5Z3VMMw4GUGBEiXSocTsMHnzwI2JSjKLT3Yfu_0", "content": "", "creation_timestamp": "2026-01-03T19:00:07.000000Z"}, {"uuid": "8a23bfc5-a1d4-455a-b306-a65605c0c701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "published-proof-of-concept", "source": "Telegram/1EkOSHdmZ1gioOjMn3z-EaaoI7ZUIvqIhlrhXK1uiTu8buU", "content": "", "creation_timestamp": "2026-01-03T21:00:04.000000Z"}, {"uuid": "0179447c-9eff-4ff3-9ed9-6b04446684d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1879", "type": "seen", "source": "https://t.me/cvedetector/19412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1879 - i-Drive i11/i12 Hard-Coded Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1879 \nPublished : March 3, 2025, 8:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:16.000000Z"}, {"uuid": "7e2211d7-ebb5-4777-b386-1407d2209dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1897", "type": "seen", "source": "https://t.me/cvedetector/19438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1897 - Tenda TX3 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1897 \nPublished : March 4, 2025, 2:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:30.000000Z"}, {"uuid": "b06a19ed-6093-4436-a8ff-3bc7b442b4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1896", "type": "seen", "source": "https://t.me/cvedetector/19437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1896 - Tenda TX3 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1896 \nPublished : March 4, 2025, 2:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:29.000000Z"}, {"uuid": "f8dc2925-ad2e-4c6f-b6fa-1830c7b0b0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1895", "type": "seen", "source": "https://t.me/cvedetector/19436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1895 - Tenda TX3 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1895 \nPublished : March 4, 2025, 2:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:28.000000Z"}, {"uuid": "49d26e9a-398e-4743-b07f-15114c6ea725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "seen", "source": "https://t.me/cvedetector/19256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1814 - Tenda AC6 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1814 \nPublished : March 2, 2025, 11:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T15:16:07.000000Z"}, {"uuid": "77b41dec-51cf-4c0e-9101-f4d41f940473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1815", "type": "seen", "source": "https://t.me/cvedetector/19255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1815 - Apache Pbrong HRMS Remote Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1815 \nPublished : March 2, 2025, 12:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \\resource\\resource.go. The manipulation of the argument user_cookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T15:16:06.000000Z"}, {"uuid": "6e8c5ea3-3f6f-4dc5-aca9-8932c8c88417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1893", "type": "seen", "source": "https://t.me/cvedetector/19442", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1893 - Open5GS UDM Subscriber Data Management Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1893 \nPublished : March 4, 2025, 1:15 a.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authentication of the file src/amf/gmm-sm.c of the component UDM Subscriber Data Management. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named e31e9965f00d9c744a7f728497cb4f3e97744ee8. It is recommended to apply a patch to fix this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:36.000000Z"}, {"uuid": "08d1afcd-73c7-4dfd-83b7-3fc6bb89e23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1892", "type": "seen", "source": "https://t.me/cvedetector/19441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1892 - Shishuocms Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1892 \nPublished : March 4, 2025, 1:15 a.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:35.000000Z"}, {"uuid": "4605635a-1373-4757-a36b-cbcb4174aca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1894", "type": "seen", "source": "https://t.me/cvedetector/19440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1894 - PHPGurukul Restaurant Table Booking System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1894 \nPublished : March 4, 2025, 2:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:31.000000Z"}, {"uuid": "c8b8acaa-83ad-4935-84d7-091fb731b1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1898", "type": "seen", "source": "https://t.me/cvedetector/19439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1898 - Tenda TX3 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1898 \nPublished : March 4, 2025, 2:15 a.m. | 21\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown function of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:30.000000Z"}, {"uuid": "59a64053-ad3f-4929-af89-c9a9380f13c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1890", "type": "seen", "source": "https://t.me/cvedetector/19430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1890 - ShishuoCMS Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1890 \nPublished : March 4, 2025, 12:15 a.m. | 18\u00a0minutes ago \nDescription : A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T01:36:52.000000Z"}, {"uuid": "c165dc2b-f809-41bc-8e8e-9e8fc2e08972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1889", "type": "seen", "source": "https://t.me/cvedetector/19400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1889 - Picklescan Non-Standard File Extension Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1889 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:39.000000Z"}, {"uuid": "a3d1ed79-9f33-4912-88f1-4e25cc0ecfbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1878", "type": "seen", "source": "https://t.me/cvedetector/19399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1878 - i-Drive WiFi Default Password Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1878 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This vulnerability affects unknown code of the component WiFi. The manipulation leads to use of default password. Access to the local network is required for this attack to succeed. The complexity of an attack is rather high. The exploitation appears to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:39.000000Z"}, {"uuid": "e77bdb0f-e955-4ab3-a3db-4340dcfa7989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1880", "type": "seen", "source": "https://t.me/cvedetector/19413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1880 - i-Drive Device Pairing Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1880 \nPublished : March 3, 2025, 8:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been classified as problematic. Affected is an unknown function of the component Device Pairing. The manipulation leads to authentication bypass by primary weakness. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitability is told to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. \nSeverity: 2.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:17.000000Z"}, {"uuid": "9a92dfb4-d04c-4428-afd7-af1a9c67ab05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1882", "type": "seen", "source": "https://t.me/cvedetector/19410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1882 - i-Drive Device Setting Handler Local Register Interface Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1882 \nPublished : March 3, 2025, 9:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interface. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:15.000000Z"}, {"uuid": "dc8b7db2-3f11-4a1a-b65c-705fdfe5e88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1873", "type": "seen", "source": "https://t.me/cvedetector/19348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1873 - \"101news SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2025-1873 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"pagetitle\" and \"pagedescription\" parameters in admin/contactus.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:52.000000Z"}, {"uuid": "9a651301-3e81-4543-a823-b82686b40fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1877", "type": "seen", "source": "https://t.me/cvedetector/19398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1877 - D-Link DAP-1562 HTTP POST Request Handler Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1877 \nPublished : March 3, 2025, 7:15 p.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T21:24:38.000000Z"}, {"uuid": "3069c561-e469-43a1-933f-461f24b996db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1876", "type": "seen", "source": "https://t.me/cvedetector/19378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1876 - D-Link DAP-1562 HTTP Header Handler Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-1876 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:06.000000Z"}, {"uuid": "6455d396-a5c9-4717-a720-ae51dbd1fd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1843", "type": "seen", "source": "https://t.me/cvedetector/19278", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1843 - Mini-Tmall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1843 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:38.000000Z"}, {"uuid": "52dd2fd2-cebc-4b68-9af5-7d49ebfadb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1835", "type": "seen", "source": "https://t.me/cvedetector/19272", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1835 - \"Osuuu LightPicture Remote File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1835 \nPublished : March 2, 2025, 11:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T01:18:16.000000Z"}, {"uuid": "fa219ead-e5f8-4645-8050-c8a7ccf7f618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1801", "type": "seen", "source": "https://t.me/cvedetector/19354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1801 - Ansible aap-gateway Concurrency JWT Token Stealing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1801 \nPublished : March 3, 2025, 3:15 p.m. | 59\u00a0minutes ago \nDescription : A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the server to be jeopardized. A user session or confidential data might be vulnerable. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T18:03:29.000000Z"}, {"uuid": "40f53798-35f4-4343-bc14-bc49d4d041de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1869", "type": "seen", "source": "https://t.me/cvedetector/19351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1869 - \"101news SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1869 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"username\" parameter in admin/check_avalability.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:58.000000Z"}, {"uuid": "b4e61c15-6b44-489c-b1eb-1c538c25908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1875", "type": "seen", "source": "https://t.me/cvedetector/19350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1875 - \"101news SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1875 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"searchtitle\" parameter in search.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:57.000000Z"}, {"uuid": "8a6e74ec-5bc7-4449-96c4-28ca09539de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1874", "type": "seen", "source": "https://t.me/cvedetector/19349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1874 - 101news SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1874 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"description\" parameter in admin/add-category.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:53.000000Z"}, {"uuid": "55348fc4-27f4-4e9e-8cf4-35bf1d3080c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1872", "type": "seen", "source": "https://t.me/cvedetector/19347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1872 - \"101news SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2025-1872 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"sadminusername\" parameter in admin/add-subadmins.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:52.000000Z"}, {"uuid": "757bc2a4-9048-4f33-805e-a4b12045a307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1871", "type": "seen", "source": "https://t.me/cvedetector/19346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1871 - 101news SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1871 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"category\" and \"subcategory\" parameters in admin/add-subcategory.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:51.000000Z"}, {"uuid": "dd39930b-89df-47b9-a944-ec5efa4d64a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1870", "type": "seen", "source": "https://t.me/cvedetector/19345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1870 - 101news SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1870 \nPublished : March 3, 2025, 1:15 p.m. | 58\u00a0minutes ago \nDescription : SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"pagedescription\" parameter in admin/aboutus.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T15:32:50.000000Z"}, {"uuid": "e428c4d8-56db-4a6e-87d0-401129afe2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1866", "type": "seen", "source": "https://t.me/cvedetector/19316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1866 - Libwebsockets Win32 Pointer Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1866 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32 platform.  \n  \nBy default, the affected code is not executed unless one of the following conditions is met:  \n  \nLWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake.  \nLWS_WITH_HTTP_STREAM_COMPRESSION (default OFF) is manually set to ON in CMake.  \nDespite these conditions, when triggered in affected configurations, this vulnerability may allow attackers to manipulate pointers, potentially leading to memory corruption or unexpected behavior. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:29.000000Z"}, {"uuid": "33dff7d2-59aa-411b-a090-f818b2921be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "seen", "source": "https://t.me/cvedetector/19326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1868 - \"Advanced IP Scanner and Advanced Port Scanner NTLM Hash Exposure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1868 \nPublished : March 3, 2025, 11:15 a.m. | 54\u00a0minutes ago \nDescription : Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T13:52:14.000000Z"}, {"uuid": "eb50484c-8700-43a7-b859-79edb6b1b60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1857", "type": "seen", "source": "https://t.me/cvedetector/19323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1857 - PHPGurukul Nipah Virus Testing Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1857 \nPublished : March 3, 2025, 8:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:39.000000Z"}, {"uuid": "2ae718c9-d0d7-4a04-a032-082baa1837d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1856", "type": "seen", "source": "https://t.me/cvedetector/19322", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1856 - Codezips Gym Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1856 \nPublished : March 3, 2025, 8:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:38.000000Z"}, {"uuid": "589813d2-a0ad-4ecd-850a-29628c90a1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1848", "type": "seen", "source": "https://t.me/cvedetector/19306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1848 - \"zj1983 zz Server-Side Request Forgery (SSRF) Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1848 \nPublished : March 3, 2025, 4:15 a.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T07:10:34.000000Z"}, {"uuid": "a99566f7-b8fd-4856-adbe-f2bbef0be305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1858", "type": "seen", "source": "https://t.me/cvedetector/19321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1858 - Codezips Online Shopping Website SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1858 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:37.000000Z"}, {"uuid": "c3cde390-1fec-4472-91ad-d4a7e3db669e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1867", "type": "seen", "source": "https://t.me/cvedetector/19317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1867 - Ithewei Libhv HTTP Request Smuggling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1867 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:30.000000Z"}, {"uuid": "cebf7768-23db-4cfa-b4b9-62813d281c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "seen", "source": "https://t.me/cvedetector/19313", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1853 - Tenda AC8 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1853 \nPublished : March 3, 2025, 6:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T09:41:05.000000Z"}, {"uuid": "b7f663dc-f9a6-419c-8048-96701789659a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1859", "type": "seen", "source": "https://t.me/cvedetector/19315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1859 - PHPGurukul News Portal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1859 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:29.000000Z"}, {"uuid": "6c83f0e9-5d93-4e9d-bdee-73affcf16cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "seen", "source": "https://t.me/cvedetector/19314", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1864 - Radare2 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-1864 \nPublished : March 3, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:28.000000Z"}, {"uuid": "6d6f7f73-e37c-4af2-bc86-b676112c58b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "seen", "source": "https://t.me/cvedetector/19312", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1852 - Totolink EX1800T Remote Buffer Overflow in loginAuth\", \n  \"Content\": \"CVE ID : CVE-2025-1852 \nPublished : March 3, 2025, 6:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T09:41:01.000000Z"}, {"uuid": "f065b9e5-efb3-4245-9ef9-37f872207d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1841", "type": "seen", "source": "https://t.me/cvedetector/19287", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1841 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1841 \nPublished : March 3, 2025, 12:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:51.000000Z"}, {"uuid": "39c93f50-885a-4f9d-8869-bd43713dfe52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1842", "type": "seen", "source": "https://t.me/cvedetector/19285", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1842 - FITSTATS Technologies AthleteMonitoring Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1842 \nPublished : March 3, 2025, 1:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:50.000000Z"}, {"uuid": "2786e557-f9a1-4046-b501-b8c662a5191c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1808", "type": "seen", "source": "https://t.me/cvedetector/19249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1808 - Pixsoft E-Saphira SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1808 \nPublished : March 2, 2025, 1:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T04:23:54.000000Z"}, {"uuid": "610de5ac-06d2-4ae2-9d78-701d56310c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1855", "type": "seen", "source": "https://t.me/cvedetector/19309", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1855 - PHPGurukul Online Shopping Portal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1855 \nPublished : March 3, 2025, 7:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T09:40:59.000000Z"}, {"uuid": "d908b085-2aac-41b5-a28c-2e2c9129b9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1854", "type": "seen", "source": "https://t.me/cvedetector/19308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1854 - Codezips Gym Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1854 \nPublished : March 3, 2025, 7:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T09:40:58.000000Z"}, {"uuid": "4b1bff7a-c379-4171-8a92-112cb5400388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1849", "type": "seen", "source": "https://t.me/cvedetector/19307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1849 - \"ZJ1983 zz Server-Side Request Forgery Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1849 \nPublished : March 3, 2025, 4:15 a.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T07:10:34.000000Z"}, {"uuid": "f2c69c26-583f-4de9-a946-d50b28182797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1850", "type": "seen", "source": "https://t.me/cvedetector/19304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1850 - Codezips College Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1850 \nPublished : March 3, 2025, 5:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T07:10:32.000000Z"}, {"uuid": "43c80b30-5d37-481f-bfcd-d3b52ef10821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "seen", "source": "https://t.me/cvedetector/19303", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1851 - Tenda AC7 Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1851 \nPublished : March 3, 2025, 5:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T07:10:32.000000Z"}, {"uuid": "ed3f88c8-101d-43af-8562-97ec73b4ec0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1845", "type": "seen", "source": "https://t.me/cvedetector/19302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1845 - ESAFENET DSM Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1845 \nPublished : March 3, 2025, 2:15 a.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T05:30:12.000000Z"}, {"uuid": "6c8b10eb-bc64-4484-b779-fb53bb2b8e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1844", "type": "seen", "source": "https://t.me/cvedetector/19301", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1844 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1844 \nPublished : March 3, 2025, 2:15 a.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T05:30:11.000000Z"}, {"uuid": "b3d9255e-7adf-4a3d-9a76-829bf38e4ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1847", "type": "seen", "source": "https://t.me/cvedetector/19300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1847 - \"zj1983 zz Remote Critical Authorization Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2025-1847 \nPublished : March 3, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T05:30:10.000000Z"}, {"uuid": "fe073a7b-3ea1-46b2-a384-46f5ddd2d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1846", "type": "seen", "source": "https://t.me/cvedetector/19299", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1846 - Zj1983 File Handler Remote Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1846 \nPublished : March 3, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T05:30:09.000000Z"}, {"uuid": "89d65f64-1118-4ea0-ada0-fe5d5c1ea221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1840", "type": "seen", "source": "https://t.me/cvedetector/19288", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1840 - ESAFENET CDG SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1840 \nPublished : March 3, 2025, 12:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T02:58:52.000000Z"}, {"uuid": "d586beb2-c74d-4296-9310-d3c9ee44aa69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1834", "type": "seen", "source": "https://t.me/cvedetector/19274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1834 - \"zj1983 zz Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1834 \nPublished : March 2, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T01:18:18.000000Z"}, {"uuid": "635b5fe2-9715-4b55-bc7d-19d670d71f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1833", "type": "seen", "source": "https://t.me/cvedetector/19273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1833 - Apache ZJ1983 HTTP Request Handler SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1833 \nPublished : March 2, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customer_notice/Customer_noticeAction.java of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T01:18:17.000000Z"}, {"uuid": "c4e98f97-6539-4ba4-bd22-fa33c8dca11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "seen", "source": "https://t.me/cvedetector/19266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1829 - TOTOLINK X18 OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1829 \nPublished : March 2, 2025, 7:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T21:07:21.000000Z"}, {"uuid": "a82ba411-3f80-41ea-a88f-c50d194083c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1821", "type": "seen", "source": "https://t.me/cvedetector/19265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1821 - Zj1983 ZZ SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1821 \nPublished : March 2, 2025, 7:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T21:07:20.000000Z"}, {"uuid": "86a2e9c2-260b-4d7d-8892-776f054c8d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1818", "type": "seen", "source": "https://t.me/cvedetector/19263", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1818 - \"zj1983 zz Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1818 \nPublished : March 2, 2025, 4:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T19:27:03.000000Z"}, {"uuid": "b1bff1ed-1e0b-4496-af2f-41055640d375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1836", "type": "seen", "source": "https://t.me/cvedetector/19271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1836 - Incorta Edit Insight Handler CSV Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1836 \nPublished : March 2, 2025, 11:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T01:18:13.000000Z"}, {"uuid": "d72802ce-e3cb-417c-9f2b-8f0f86f66c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1830", "type": "seen", "source": "https://t.me/cvedetector/19270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1830 - \"zj1983 zz Customer Information Handler Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1830 \nPublished : March 2, 2025, 8:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Information Handler. The manipulation of the argument Customer Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T22:47:43.000000Z"}, {"uuid": "dec02e7f-2aa9-46a3-bad0-77219982fe86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1831", "type": "seen", "source": "https://t.me/cvedetector/19269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1831 - Futvan Zorg Action SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1831 \nPublished : March 2, 2025, 8:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T22:47:42.000000Z"}, {"uuid": "2fd0916e-c656-45d0-83d2-40d8a77dd72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1832", "type": "seen", "source": "https://t.me/cvedetector/19268", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1832 - Zj1983 ZZ SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1832 \nPublished : March 2, 2025, 9:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T22:47:41.000000Z"}, {"uuid": "4ac4052d-26ce-4c23-88f8-8ecde79ac03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1820", "type": "seen", "source": "https://t.me/cvedetector/19261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1820 - \"Zj1983 ZZ SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1820 \nPublished : March 2, 2025, 5:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T19:27:01.000000Z"}, {"uuid": "9a0f37ca-740e-4846-ab82-9158bfa13360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1819", "type": "seen", "source": "https://t.me/cvedetector/19260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1819 - Tenda AC7 Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1819 \nPublished : March 2, 2025, 5:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lan_ip leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T19:27:01.000000Z"}, {"uuid": "5807e785-89f5-494b-a019-e156e1a9c27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1816", "type": "seen", "source": "https://t.me/cvedetector/19259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1816 - FFmpeg IAMF File Handler Audio Element OBU Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2025-1816 \nPublished : March 2, 2025, 2:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The manipulation of the argument num_parameters leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 0526535cd58444dd264e810b2f3348b4d96cff3b. It is recommended to apply a patch to fix this issue. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T16:56:30.000000Z"}, {"uuid": "a2364006-18ef-4e40-bbf3-e795c3fbf9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1817", "type": "seen", "source": "https://t.me/cvedetector/19258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1817 - Mini-Tmall Admin Name Handler Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1817 \nPublished : March 2, 2025, 3:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown code of the file /admin of the component Admin Name Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T16:56:29.000000Z"}, {"uuid": "6892e40d-1740-42e8-9d8d-10503f279a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "seen", "source": "https://t.me/cvedetector/19254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1811 - AT Software Solutions ATSVD SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1811 \nPublished : March 2, 2025, 9:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.aspx of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T12:45:37.000000Z"}, {"uuid": "98c3460c-7cf5-4c13-859b-5c31c839f93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1812", "type": "seen", "source": "https://t.me/cvedetector/19253", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1812 - \"zj1983 zz SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1812 \nPublished : March 2, 2025, 9:15 a.m. | 2\u00a0hours, 10\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T12:45:36.000000Z"}, {"uuid": "d790ee4b-eebf-4f67-ab64-2d61d5333200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1813", "type": "seen", "source": "https://t.me/cvedetector/19252", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1813 - \"Zj1983 ZZ Cross-Site Request Forgery Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1813 \nPublished : March 2, 2025, 10:15 a.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T12:45:36.000000Z"}, {"uuid": "cfcd14c7-c470-4b47-8ae3-012f5b08ba81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1810", "type": "seen", "source": "https://t.me/cvedetector/19251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1810 - Pixsoft Vivaz Cross-Site Scripting (XSS) Vulnerability in Login Endpoint\", \n  \"Content\": \"CVE ID : CVE-2025-1810 \nPublished : March 2, 2025, 7:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown function of the file /servlet?act=login&submit=1&evento=0&pixrnd=0125021817031859360231 of the component Login Endpoint. The manipulation of the argument sistema leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T11:05:12.000000Z"}, {"uuid": "d3df1288-1b81-46ba-a0c0-c0ffc8bf7825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1809", "type": "seen", "source": "https://t.me/cvedetector/19250", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1809 - Pixsoft Sol SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1809 \nPublished : March 2, 2025, 6:15 a.m. | 58\u00a0minutes ago \nDescription : A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pix_projetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T08:34:46.000000Z"}, {"uuid": "122046ea-1039-4958-a2b3-94c1b3972224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1806", "type": "seen", "source": "https://t.me/cvedetector/19245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1806 - Eastnets PaymentSafe URL Handler Improper Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1806 \nPublished : March 2, 2025, 12:15 a.m. | 45\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T02:43:32.000000Z"}, {"uuid": "835b69ff-c912-4a69-8d22-e71f823ec0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1807", "type": "seen", "source": "https://t.me/cvedetector/19244", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1807 - Eastnets PaymentSafe Basic Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1807 \nPublished : March 2, 2025, 12:15 a.m. | 45\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the argument Title leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-02T02:43:32.000000Z"}, {"uuid": "296e6188-a048-479b-b472-e663f2eed706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "https://t.me/cvedetector/19825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1886 - Sage 200 Spain SMTP Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-1886 \nPublished : March 7, 2025, 11:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T14:56:59.000000Z"}, {"uuid": "b5475d69-197e-4f77-baaf-c2e730af9efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "https://t.me/cvedetector/19823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1887 - Sage 200 Spain SMB Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1887 \nPublished : March 7, 2025, 11:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T14:56:58.000000Z"}, {"uuid": "38f0e4ae-2859-4e83-8b54-7acedee37ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "https://t.me/cvedetector/19243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1804 - Blizzard Battle.Net Profapi.dll Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1804 \nPublished : March 1, 2025, 7:15 p.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T22:32:48.000000Z"}, {"uuid": "1ce25b35-eac6-4282-8c3d-f58a04301c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "https://t.me/cvedetector/19241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1800 - D-Link DAR-7000 HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1800 \nPublished : March 1, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T20:02:20.000000Z"}, {"uuid": "ce1dbcc2-d404-4c7a-b2b2-89e0b52f2591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1866", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1866\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32 platform.\n\nBy default, the affected code is not executed unless one of the following conditions is met:\n\nLWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake.\nLWS_WITH_HTTP_STREAM_COMPRESSION (default OFF) is manually set to ON in CMake.\nDespite these conditions, when triggered in affected configurations, this vulnerability may allow attackers to manipulate pointers, potentially leading to memory corruption or unexpected behavior.\n\ud83d\udccf Published: 2025-03-03T08:44:23.118Z\n\ud83d\udccf Modified: 2025-03-03T08:44:23.118Z\n\ud83d\udd17 References:\n1. https://github.com/warmcat/libwebsockets/commit/3f7c79fd57338aca1bf4a1b1f24e324b80d36265", "creation_timestamp": "2025-03-03T09:35:35.000000Z"}, {"uuid": "42cf4edd-265e-4952-94c1-b49606811cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1892", "type": "seen", "source": "Telegram/k72Q-VhsHJlO-t9ztYROY8LMnoHUlO0gHlebJbPo23VKKPTX", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "9791df01-44e9-4b04-ac60-7aba25c325b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "seen", "source": "Telegram/kiKlQOhBvDinYr1UVs02I22woiDB_uwIImEayvNM-Q88qYTX", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "e0141880-9bb6-4ce8-b950-d472d93334d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1808", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1808\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T00:31:04.998Z\n\ud83d\udccf Modified: 2025-03-02T00:31:04.998Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298066\n2. https://vuldb.com/?ctiid.298066\n3. https://vuldb.com/?submit.503260\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-03-02T01:31:01.000000Z"}, {"uuid": "a501df6f-dddf-4b2c-bfec-be87d01c5e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1817\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown code of the file /admin of the component Admin Name Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T14:31:04.431Z\n\ud83d\udccf Modified: 2025-03-02T14:31:04.431Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298090\n2. https://vuldb.com/?ctiid.298090\n3. https://vuldb.com/?submit.504302\n4. https://github.com/qkdjksfkeg/cve_article/blob/main/Tmall_demo/XSS.md", "creation_timestamp": "2025-03-02T15:32:08.000000Z"}, {"uuid": "01092843-6816-4dac-be7f-3d3014355668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1816", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1816\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The manipulation of the argument num_parameters leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 0526535cd58444dd264e810b2f3348b4d96cff3b. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-03-02T14:00:07.515Z\n\ud83d\udccf Modified: 2025-03-02T14:00:07.515Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298089\n2. https://vuldb.com/?ctiid.298089\n3. https://vuldb.com/?submit.506575\n4. https://trac.ffmpeg.org/ticket/11475\n5. https://trac.ffmpeg.org/attachment/ticket/11475/poc\n6. https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0526535cd58444dd264e810b2f3348b4d96cff3b\n7. https://ffmpeg.org/", "creation_timestamp": "2025-03-02T14:30:30.000000Z"}, {"uuid": "92dbbb85-1041-4fff-9338-5b19da658a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6144", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1849\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T04:00:09.157Z\n\ud83d\udccf Modified: 2025-03-03T04:00:09.157Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298117\n2. https://vuldb.com/?ctiid.298117\n3. https://vuldb.com/?submit.505346\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_todb_SSRF.md", "creation_timestamp": "2025-03-03T04:29:46.000000Z"}, {"uuid": "7930ef0b-8e30-488e-b04b-18a93e5b5d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6133", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1846\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T02:31:04.750Z\n\ud83d\udccf Modified: 2025-03-03T02:31:04.750Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298114\n2. https://vuldb.com/?ctiid.298114\n3. https://vuldb.com/?submit.505097\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md", "creation_timestamp": "2025-03-03T03:33:36.000000Z"}, {"uuid": "48603ec5-332d-48f5-b3d2-82a996405890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1850", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1850\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T04:31:04.196Z\n\ud83d\udccf Modified: 2025-03-03T04:31:04.196Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298118\n2. https://vuldb.com/?ctiid.298118\n3. https://vuldb.com/?submit.511626\n4. https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_2.md", "creation_timestamp": "2025-03-03T05:29:58.000000Z"}, {"uuid": "9c215a6b-d3b6-469c-b1b0-ca0eec9313b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1829", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6106", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1829\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T19:00:07.619Z\n\ud83d\udccf Modified: 2025-03-02T19:00:07.619Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298096\n2. https://vuldb.com/?ctiid.298096\n3. https://vuldb.com/?submit.504983\n4. https://github.com/sjwszt/CVE/blob/main/CVE_2.md\n5. https://www.totolink.net/", "creation_timestamp": "2025-03-02T19:28:43.000000Z"}, {"uuid": "dd6ea3fa-68c7-4ecc-ad91-d1fb5765ae37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1883", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14494", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1883\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Out-Of-Bounds Write vulnerability exists in the OBJ file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted OBJ\u00c2\u00a0file.\n\ud83d\udccf Published: 2025-05-02T15:03:08.513Z\n\ud83d\udccf Modified: 2025-05-02T15:03:08.513Z\n\ud83d\udd17 References:\n1. https://www.3ds.com/vulnerability/advisories", "creation_timestamp": "2025-05-02T15:16:58.000000Z"}, {"uuid": "5bf73be6-f83e-47a7-8304-f465a95efa7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1855", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1855\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T07:00:08.159Z\n\ud83d\udccf Modified: 2025-03-03T07:00:08.159Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298123\n2. https://vuldb.com/?ctiid.298123\n3. https://vuldb.com/?submit.506066\n4. https://github.com/panghuanjie/Code-audits/blob/main/PHPGurukul/PHPGurukul%20Online%20Shopping%20Portal%20v2.1%20SQL%20Injection3%20.pdf\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-03T07:29:35.000000Z"}, {"uuid": "931fab8e-6797-4f05-8692-33e2d1a3e5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1884", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14493", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1884\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.\n\ud83d\udccf Published: 2025-05-02T15:03:25.073Z\n\ud83d\udccf Modified: 2025-05-02T15:03:25.073Z\n\ud83d\udd17 References:\n1. https://www.3ds.com/vulnerability/advisories", "creation_timestamp": "2025-05-02T15:16:57.000000Z"}, {"uuid": "84f111ff-0f1c-4aeb-839a-3ea0c90d006d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1819", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1819\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lan_ip leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T16:31:05.928Z\n\ud83d\udccf Modified: 2025-03-02T16:31:05.928Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298092\n2. https://vuldb.com/?ctiid.298092\n3. https://vuldb.com/?submit.504429\n4. https://github.com/Raining-101/IOT_cve/blob/main/Tenda%20a7%20V15.03.06.44%20Command%20injection.md\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-02T17:29:45.000000Z"}, {"uuid": "662d5260-0490-4ec7-8726-6f896757479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1833", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6113", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1833\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customer_notice/Customer_noticeAction.java of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T21:31:04.311Z\n\ud83d\udccf Modified: 2025-03-02T21:31:04.311Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298100\n2. https://vuldb.com/?ctiid.298100\n3. https://vuldb.com/?submit.504833\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8%E5%90%8E%E5%8F%B0SSRF.md", "creation_timestamp": "2025-03-02T22:29:21.000000Z"}, {"uuid": "1e1bb211-8d3d-48bf-9a5a-e7c9b338c4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1859", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1859\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T09:00:08.310Z\n\ud83d\udccf Modified: 2025-03-03T09:00:08.310Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298127\n2. https://vuldb.com/?ctiid.298127\n3. https://vuldb.com/?submit.506350\n4. https://github.com/panghuanjie/Code-audits/issues/2\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-03T09:35:27.000000Z"}, {"uuid": "0f2927d5-4a30-414b-876d-882639bbedd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1856", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1856\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T07:31:06.276Z\n\ud83d\udccf Modified: 2025-03-03T07:31:06.276Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298124\n2. https://vuldb.com/?ctiid.298124\n3. https://vuldb.com/?submit.506107\n4. https://github.com/smartttt1/CVE/blob/main/CVE_1.md", "creation_timestamp": "2025-03-03T08:29:29.000000Z"}, {"uuid": "52bfab27-f751-4d57-b2ec-9c2e9f83ed36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1809", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1809\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pix_projetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T06:00:10.691Z\n\ud83d\udccf Modified: 2025-03-02T06:00:10.691Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298067\n2. https://vuldb.com/?ctiid.298067\n3. https://vuldb.com/?submit.503275\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-03-02T06:28:47.000000Z"}, {"uuid": "d13d0c6c-8452-413d-873c-70f2592e2682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1815", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1815\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \\resource\\resource.go. The manipulation of the argument user_cookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T12:00:08.869Z\n\ud83d\udccf Modified: 2025-03-02T12:00:08.869Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298083\n2. https://vuldb.com/?ctiid.298083\n3. https://vuldb.com/?submit.506544\n4. https://github.com/A7cc/cve/issues/4\n5. https://github.com/A7cc/cve/issues/4#issue-2877111776", "creation_timestamp": "2025-03-02T12:33:40.000000Z"}, {"uuid": "b5871bc0-82c5-4968-8a88-20bdb44dec21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1831", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6108", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1831\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T20:00:07.785Z\n\ud83d\udccf Modified: 2025-03-02T20:00:07.785Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298098\n2. https://vuldb.com/?ctiid.298098\n3. https://vuldb.com/?submit.504806\n4. https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A52.md", "creation_timestamp": "2025-03-02T20:28:52.000000Z"}, {"uuid": "8fa9b5de-6d60-41b4-bce3-31f3ba84f535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1821", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6107", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1821\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T18:31:04.641Z\n\ud83d\udccf Modified: 2025-03-02T18:31:04.641Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298094\n2. https://vuldb.com/?ctiid.298094\n3. https://vuldb.com/?submit.504537\n4. https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%89%8D%E5%8F%B0SQL%E6%B3%A8%E5%85%A5.md", "creation_timestamp": "2025-03-02T19:28:44.000000Z"}, {"uuid": "6d7814db-b63f-4e78-8e2b-3f03dbda2a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1800\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-01T18:00:05.956Z\n\ud83d\udccf Modified: 2025-03-01T18:00:05.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298030\n2. https://vuldb.com/?ctiid.298030\n3. https://vuldb.com/?submit.502971\n4. https://github.com/sjwszt/CVE/blob/main/CVE_1.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-01T18:31:57.000000Z"}, {"uuid": "f27bfd2c-86cd-428c-a879-7da7f69dc2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1834", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1834\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T22:00:06.192Z\n\ud83d\udccf Modified: 2025-03-02T22:00:06.192Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298101\n2. https://vuldb.com/?ctiid.298101\n3. https://vuldb.com/?submit.504842\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_resolve%E6%8E%A5%E5%8F%A3%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md", "creation_timestamp": "2025-03-02T22:29:20.000000Z"}, {"uuid": "b1806d5b-2eba-4757-aed7-245ae1514bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1832", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1832\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T21:00:08.820Z\n\ud83d\udccf Modified: 2025-03-02T21:00:08.820Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298099\n2. https://vuldb.com/?ctiid.298099\n3. https://vuldb.com/?submit.504814\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8_4%E5%90%8E%E5%8F%B0SQL%E6%B3%A8%E5%85%A5.md", "creation_timestamp": "2025-03-02T21:30:55.000000Z"}, {"uuid": "33f5f20d-0d3e-4533-aeaf-0c4faa7442fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1830", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6109", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1830\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Information Handler. The manipulation of the argument Customer Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T19:31:03.920Z\n\ud83d\udccf Modified: 2025-03-02T19:31:03.920Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298097\n2. https://vuldb.com/?ctiid.298097\n3. https://vuldb.com/?submit.504790\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_xss1.md", "creation_timestamp": "2025-03-02T20:28:54.000000Z"}, {"uuid": "62189d78-85a8-41a8-bba3-ae9db0e3e608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1840", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1840\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T23:31:04.737Z\n\ud83d\udccf Modified: 2025-03-02T23:31:04.737Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298106\n2. https://vuldb.com/?ctiid.298106\n3. https://vuldb.com/?submit.504384\n4. https://github.com/Rain1er/report/blob/main/CDG/dXBkYXRlb3JnLmpzcA%3D%3D.md", "creation_timestamp": "2025-03-03T00:29:50.000000Z"}, {"uuid": "50d94ed4-a256-4aad-b1e2-53de40f3a158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1806", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1806\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-01T23:31:04.940Z\n\ud83d\udccf Modified: 2025-03-01T23:31:04.940Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298064\n2. https://vuldb.com/?ctiid.298064\n3. https://vuldb.com/?submit.502539\n4. https://drive.google.com/file/d/1WT5mJwL9NvKxBLIIj7TDbeAq6dchs5Gk/view?usp=sharing", "creation_timestamp": "2025-03-02T00:30:19.000000Z"}, {"uuid": "814d4989-8e9f-4bea-9426-0d7fbace89c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1807", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1807\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the argument Title leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T00:00:08.805Z\n\ud83d\udccf Modified: 2025-03-02T00:00:08.805Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298065\n2. https://vuldb.com/?ctiid.298065\n3. https://vuldb.com/?submit.502668\n4. https://drive.google.com/file/d/1-4BwJxzKUdVRsi6PYh68mKzeIPAqug1Q/view", "creation_timestamp": "2025-03-02T00:30:18.000000Z"}, {"uuid": "cf767915-dc38-4ab6-8b7e-930021bcaeb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6081", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1804\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult.\n\ud83d\udccf Published: 2025-03-01T18:31:04.185Z\n\ud83d\udccf Modified: 2025-03-01T18:31:04.185Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298040\n2. https://vuldb.com/?ctiid.298040\n3. https://vuldb.com/?submit.485034", "creation_timestamp": "2025-03-01T19:30:03.000000Z"}, {"uuid": "1c34a738-7221-4002-b39c-ab759a4f2011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1810", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6089", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1810\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown function of the file /servlet?act=login&submit=1&evento=0&pixrnd=0125021817031859360231 of the component Login Endpoint. The manipulation of the argument sistema leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T07:00:08.129Z\n\ud83d\udccf Modified: 2025-03-02T07:00:08.129Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298068\n2. https://vuldb.com/?ctiid.298068\n3. https://vuldb.com/?submit.503323\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-03-02T07:32:50.000000Z"}, {"uuid": "567212e5-3eb4-4d0e-985a-9ab7092bb4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1842", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1842\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T00:31:04.662Z\n\ud83d\udccf Modified: 2025-03-03T00:31:04.662Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298108\n2. https://vuldb.com/?ctiid.298108\n3. https://vuldb.com/?submit.504603", "creation_timestamp": "2025-03-03T01:29:15.000000Z"}, {"uuid": "8ebafbd9-20c3-4e10-abb9-0536a418479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1843", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1843\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T01:00:09.082Z\n\ud83d\udccf Modified: 2025-03-03T01:00:09.082Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298109\n2. https://vuldb.com/?ctiid.298109\n3. https://vuldb.com/?submit.504958\n4. https://github.com/qkdjksfkeg/cve_article/blob/main/Tmall_demo/SQL%20injection.md", "creation_timestamp": "2025-03-03T01:29:11.000000Z"}, {"uuid": "471c9719-c379-41cc-ac7d-88417bc7d3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1814\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T11:00:09.784Z\n\ud83d\udccf Modified: 2025-03-02T11:00:09.784Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298082\n2. https://vuldb.com/?ctiid.298082\n3. https://vuldb.com/?submit.506532\n4. https://github.com/Raining-101/IOT_cve/blob/main/ac6.md_goform_WifiExtraSet.md\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-02T11:34:02.000000Z"}, {"uuid": "137a6e33-d483-4585-8648-0e6b2913c80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1813", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6092", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1813\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T10:00:12.614Z\n\ud83d\udccf Modified: 2025-03-02T10:00:12.614Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298081\n2. https://vuldb.com/?ctiid.298081\n3. https://vuldb.com/?submit.504281\n4. https://www.yuque.com/u123456789-6sobi/cdgcbq/icmicuv9nkkvixb4?singleDoc#%20%E3%80%8AZZ_CSRF%E3%80%8B", "creation_timestamp": "2025-03-02T10:31:52.000000Z"}, {"uuid": "10d7cdce-c892-45e5-97f8-176ec3d7014d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1811\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.aspx of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-03-02T08:31:04.374Z\n\ud83d\udccf Modified: 2025-03-02T08:31:04.374Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298069\n2. https://vuldb.com/?ctiid.298069\n3. https://vuldb.com/?submit.504099\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-03-02T09:29:20.000000Z"}, {"uuid": "bb67bd0c-540a-4dc1-80f8-68aee8831d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1812", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6090", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1812\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T09:00:10.612Z\n\ud83d\udccf Modified: 2025-03-02T09:00:10.612Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298080\n2. https://vuldb.com/?ctiid.298080\n3. https://vuldb.com/?submit.504273\n4. https://github.com/A7cc/cve/issues/3", "creation_timestamp": "2025-03-02T09:29:19.000000Z"}, {"uuid": "410aa3e4-900a-47b4-9d18-934efb29c438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1818", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1818\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T16:00:09.825Z\n\ud83d\udccf Modified: 2025-03-02T16:00:09.825Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298091\n2. https://vuldb.com/?ctiid.298091\n3. https://vuldb.com/?submit.504304\n4. https://www.yuque.com/u123456789-6sobi/cdgcbq/bg2g3eit41o4cpd4", "creation_timestamp": "2025-03-02T16:29:23.000000Z"}, {"uuid": "9b484078-637f-457d-8c7b-27d62b28e556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1820\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T17:00:06.863Z\n\ud83d\udccf Modified: 2025-03-02T17:00:06.863Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298093\n2. https://vuldb.com/?ctiid.298093\n3. https://vuldb.com/?submit.504478\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_2024_8_SQL%E6%B3%A8%E5%85%A51.md", "creation_timestamp": "2025-03-02T17:29:44.000000Z"}, {"uuid": "946708a5-3ffa-4fec-8f3c-b08a543b3221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1853\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T06:00:08.840Z\n\ud83d\udccf Modified: 2025-03-03T06:00:08.840Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298121\n2. https://vuldb.com/?ctiid.298121\n3. https://vuldb.com/?submit.505374\n4. https://github.com/Raining-101/IOT_cve/blob/main/tenda-ac8_sub_49E098.md\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-03T06:29:00.000000Z"}, {"uuid": "0c2a9428-25e5-4912-9ea0-7a12716e3d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1854", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1854\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T06:31:04.518Z\n\ud83d\udccf Modified: 2025-03-03T06:31:04.518Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298122\n2. https://vuldb.com/?ctiid.298122\n3. https://vuldb.com/?submit.506053\n4. https://github.com/yhj09/CVE/blob/main/CVE_1.md", "creation_timestamp": "2025-03-03T07:29:36.000000Z"}, {"uuid": "168a7c9a-0df1-467f-9624-3887e090f9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1857", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1857\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T08:00:09.167Z\n\ud83d\udccf Modified: 2025-03-03T08:00:09.167Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298125\n2. https://vuldb.com/?ctiid.298125\n3. https://vuldb.com/?submit.506120\n4. https://github.com/panghuanjie/Code-audits/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-03T08:29:26.000000Z"}, {"uuid": "898d32d0-f619-4092-aa40-898d0ad4b115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1841", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6116", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1841\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T00:00:08.714Z\n\ud83d\udccf Modified: 2025-03-03T00:00:08.714Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298107\n2. https://vuldb.com/?ctiid.298107\n3. https://vuldb.com/?submit.504385\n4. https://github.com/Rain1er/report/blob/main/CDG/Q2xpZW50U29ydExvZy5qc3A%3D.md", "creation_timestamp": "2025-03-03T00:29:49.000000Z"}, {"uuid": "f6a52b05-3e33-41f0-a580-67587ec4cd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1835", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1835\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-02T22:31:04.757Z\n\ud83d\udccf Modified: 2025-03-02T22:31:04.757Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298102\n2. https://vuldb.com/?ctiid.298102\n3. https://vuldb.com/?submit.505007\n4. https://github.com/sheratan4/cve/issues/1", "creation_timestamp": "2025-03-02T23:29:36.000000Z"}, {"uuid": "6b75acfb-87f0-4f75-8cf5-eae29fb6d964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1836", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1836\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T23:00:06.059Z\n\ud83d\udccf Modified: 2025-03-02T23:00:06.059Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298104\n2. https://vuldb.com/?ctiid.298104\n3. https://vuldb.com/?submit.503070", "creation_timestamp": "2025-03-02T23:29:35.000000Z"}, {"uuid": "25332ecc-87c5-4c10-ba2f-17c4510c3dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1847", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6132", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1847\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T03:00:08.622Z\n\ud83d\udccf Modified: 2025-03-03T03:00:08.622Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298115\n2. https://vuldb.com/?ctiid.298115\n3. https://vuldb.com/?submit.505303\n4. https://github.com/caigo8/CVE-md/blob/main/zz/ZZ_2024_8%E5%9E%82%E7%9B%B4%E8%B6%8A%E6%9D%83.md", "creation_timestamp": "2025-03-03T03:33:35.000000Z"}, {"uuid": "ef0b4f1f-993f-4f54-ba8d-5fb4285b3be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1844\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T01:31:04.149Z\n\ud83d\udccf Modified: 2025-03-03T01:31:04.149Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298110\n2. https://vuldb.com/?ctiid.298110\n3. https://vuldb.com/?submit.505008\n4. https://github.com/666lail/report/blob/main/tmp/1.md", "creation_timestamp": "2025-03-03T02:29:28.000000Z"}, {"uuid": "6ccd6df6-51f8-431e-83bc-3bdac6e63920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1845\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T02:00:07.748Z\n\ud83d\udccf Modified: 2025-03-03T02:00:07.748Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298111\n2. https://vuldb.com/?ctiid.298111\n3. https://vuldb.com/?submit.505009\n4. https://github.com/666lail/report/blob/main/tmp/2.md", "creation_timestamp": "2025-03-03T02:29:27.000000Z"}, {"uuid": "028bde5a-98b7-40f4-b935-3a18146aa368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1875", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6194", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1875\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"searchtitle\" parameter in search.php.\n\ud83d\udccf Published: 2025-03-03T12:53:02.930Z\n\ud83d\udccf Modified: 2025-03-03T12:53:02.930Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:09.000000Z"}, {"uuid": "d7b947ba-6289-4258-b91f-8efcdbb25a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1869", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1869\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"username\" parameter in admin/check_avalability.php.\n\ud83d\udccf Published: 2025-03-03T12:49:35.389Z\n\ud83d\udccf Modified: 2025-03-03T12:49:35.389Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:18.000000Z"}, {"uuid": "7c443296-fada-4f8b-8a97-97bf0482c073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1851\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T05:00:07.574Z\n\ud83d\udccf Modified: 2025-03-03T05:00:07.574Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298119\n2. https://vuldb.com/?ctiid.298119\n3. https://vuldb.com/?submit.505271\n4. https://github.com/Raining-101/IOT_cve/blob/main/ac7_V15.03.06.44_SetFirewallCfg.md\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-03T05:29:57.000000Z"}, {"uuid": "b3d7ef21-8ee5-468c-93e4-f182e1a71d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1848", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1848\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-03T03:31:04.563Z\n\ud83d\udccf Modified: 2025-03-03T03:31:04.563Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298116\n2. https://vuldb.com/?ctiid.298116\n3. https://vuldb.com/?submit.505345\n4. https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_check_SSRF.md", "creation_timestamp": "2025-03-03T04:29:47.000000Z"}, {"uuid": "563e43d4-e3ff-447e-b061-2ec4de375dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1852\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T05:31:06.795Z\n\ud83d\udccf Modified: 2025-03-03T05:31:06.795Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298120\n2. https://vuldb.com/?ctiid.298120\n3. https://vuldb.com/?submit.505362\n4. https://github.com/watermelon-happy/cve/blob/main/ex1800tCVE.md\n5. https://www.totolink.net/", "creation_timestamp": "2025-03-03T06:29:01.000000Z"}, {"uuid": "68022b0d-699e-456f-9739-8467527543d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1858", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6166", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1858\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T08:31:04.167Z\n\ud83d\udccf Modified: 2025-03-03T08:31:04.167Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298126\n2. https://vuldb.com/?ctiid.298126\n3. https://vuldb.com/?submit.506315\n4. https://github.com/Centurion-cyber/CVE/blob/main/CVE_1.md", "creation_timestamp": "2025-03-03T09:35:36.000000Z"}, {"uuid": "78a970d0-f7c7-4973-bfec-7176edca6acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1867", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1867\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.\n\ud83d\udccf Published: 2025-03-03T08:48:56.284Z\n\ud83d\udccf Modified: 2025-03-03T08:48:56.284Z\n\ud83d\udd17 References:\n1. https://github.com/ithewei/libhv/pull/689", "creation_timestamp": "2025-03-03T09:35:34.000000Z"}, {"uuid": "542a8709-1f15-41c6-a12a-8d5624a09a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1868", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6191", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1868\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.\n\ud83d\udccf Published: 2025-03-03T10:53:44.771Z\n\ud83d\udccf Modified: 2025-03-03T10:54:58.772Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/information-display-multiple-products-famatech-corp", "creation_timestamp": "2025-03-03T11:30:20.000000Z"}, {"uuid": "9bed0ee2-1e72-48c5-bbc4-5c59310f2c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1871", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6196", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1871\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"category\" and \"subcategory\" parameters in admin/add-subcategory.php.\n\ud83d\udccf Published: 2025-03-03T12:50:41.680Z\n\ud83d\udccf Modified: 2025-03-03T12:52:12.998Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:11.000000Z"}, {"uuid": "9d63a3f5-f636-4fdf-a798-169f0d553e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1874", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1874\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"description\" parameter in admin/add-category.php.\n\ud83d\udccf Published: 2025-03-03T12:52:45.295Z\n\ud83d\udccf Modified: 2025-03-03T12:52:45.295Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:10.000000Z"}, {"uuid": "7eaca944-8ea9-4e2e-8c63-bff4cd0563e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1870", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6199", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1870\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"pagedescription\" parameter in admin/aboutus.php.\n\ud83d\udccf Published: 2025-03-03T12:50:14.993Z\n\ud83d\udccf Modified: 2025-03-03T12:50:14.993Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:16.000000Z"}, {"uuid": "c63e1b29-d845-435b-8b67-50ad69214b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1872", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1872\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"sadminusername\" parameter in admin/add-subadmins.php.\n\ud83d\udccf Published: 2025-03-03T12:51:04.557Z\n\ud83d\udccf Modified: 2025-03-03T12:51:04.557Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:12.000000Z"}, {"uuid": "874b50bc-cf10-4494-89c5-a30f545945d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1873", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6197", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1873\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SQL injection vulnerability have been found in 101news affecting version 1.0 through the \"pagetitle\" and \"pagedescription\" parameters in admin/contactus.php.\n\ud83d\udccf Published: 2025-03-03T12:51:40.448Z\n\ud83d\udccf Modified: 2025-03-03T12:51:40.448Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-101news", "creation_timestamp": "2025-03-03T13:30:12.000000Z"}, {"uuid": "e8147164-81e4-4d2e-9289-8aadc68be566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1898", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1898\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown function of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T02:00:08.711Z\n\ud83d\udccf Modified: 2025-03-04T02:00:08.711Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298416\n2. https://vuldb.com/?ctiid.298416\n3. https://vuldb.com/?submit.506606\n4. https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_4.pdf\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-04T02:30:43.000000Z"}, {"uuid": "8bf531da-d3fe-441d-ab5a-f45992a78e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1899", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1899\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T02:31:06.509Z\n\ud83d\udccf Modified: 2025-03-04T02:31:06.509Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298417\n2. https://vuldb.com/?ctiid.298417\n3. https://vuldb.com/?submit.506607\n4. https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_5.pdf\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-04T03:37:15.000000Z"}, {"uuid": "63cf4c36-f930-4990-ae57-8ae1de995dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1882", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1882\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue is some unknown functionality of the component Device Setting Handler. The manipulation leads to improper access control for register interface. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.\n\ud83d\udccf Published: 2025-03-03T21:00:09.182Z\n\ud83d\udccf Modified: 2025-03-03T21:00:09.182Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298196\n2. https://vuldb.com/?ctiid.298196\n3. https://vuldb.com/?submit.510955\n4. https://github.com/geo-chen/i-Drive", "creation_timestamp": "2025-03-03T21:30:40.000000Z"}, {"uuid": "5ebd402a-797f-4abf-8b52-58710e613fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1877", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1877\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-03T18:31:05.497Z\n\ud83d\udccf Modified: 2025-03-03T20:15:08.093Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298191\n2. https://vuldb.com/?ctiid.298191\n3. https://vuldb.com/?submit.506526\n4. https://witty-maiasaura-083.notion.site/D-link-DAP-1562-pure_auth_check-Vulnerability-1a5b2f2a63618013a1fecb743f2d0667\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-03T20:30:47.000000Z"}, {"uuid": "d79e8562-6f36-46ad-9225-7676b5f42a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1892", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6307", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1892\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T00:00:10.759Z\n\ud83d\udccf Modified: 2025-03-04T00:00:10.759Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298410\n2. https://vuldb.com/?ctiid.298410\n3. https://vuldb.com/?submit.505754\n4. https://github.com/caigo8/CVE-md/blob/main/shishuocms/%E5%AD%98%E5%82%A8%E5%9E%8BXSS.md", "creation_timestamp": "2025-03-04T01:30:31.000000Z"}, {"uuid": "6fd205f0-b9e0-4715-bf07-75486e59febe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6306", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is the function gmm_state_authentication of the file src/amf/gmm-sm.c of the component UDM Subscriber Data Management. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named e31e9965f00d9c744a7f728497cb4f3e97744ee8. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-03-04T00:00:13.888Z\n\ud83d\udccf Modified: 2025-03-04T00:00:13.888Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298411\n2. https://vuldb.com/?ctiid.298411\n3. https://vuldb.com/?submit.505952\n4. https://github.com/open5gs/open5gs/issues/3707\n5. https://github.com/open5gs/open5gs/issues/3707#issuecomment-2639620554\n6. https://github.com/open5gs/open5gs/issues/3707#issue-2833194192\n7. https://github.com/open5gs/open5gs/commit/e31e9965f00d9c744a7f728497cb4f3e97744ee8", "creation_timestamp": "2025-03-04T01:30:31.000000Z"}, {"uuid": "3c2da38f-d1af-447d-84ed-d675dfdea240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1876", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1876\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-03T17:00:08.762Z\n\ud83d\udccf Modified: 2025-03-04T16:22:55.482Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298190\n2. https://vuldb.com/?ctiid.298190\n3. https://vuldb.com/?submit.506106\n4. https://witty-maiasaura-083.notion.site/D-link-DAP-1562-http_request_parse-Vulnerability-1a4b2f2a636180a2a67de271ad5fe6d7\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-04T16:31:43.000000Z"}, {"uuid": "5692d11a-2ed5-400c-92c7-c411a1ccd8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6304", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1890\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T23:31:04.985Z\n\ud83d\udccf Modified: 2025-03-03T23:31:04.985Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298408\n2. https://vuldb.com/?ctiid.298408\n3. https://vuldb.com/?submit.505736\n4. https://github.com/caigo8/CVE-md/blob/main/shishuocms/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md", "creation_timestamp": "2025-03-04T00:31:10.000000Z"}, {"uuid": "6ac30162-0023-4670-b36d-61309a99631a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1891", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6303", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1891\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-03T23:31:06.586Z\n\ud83d\udccf Modified: 2025-03-03T23:31:06.586Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298409\n2. https://vuldb.com/?ctiid.298409\n3. https://vuldb.com/?submit.505741\n4. https://github.com/caigo8/CVE-md/blob/main/shishuocms/CSRF%E6%B7%BB%E5%8A%A0%E7%AE%A1%E7%90%86%E5%91%98.md", "creation_timestamp": "2025-03-04T00:31:09.000000Z"}, {"uuid": "96373999-da83-40b7-8d9d-4a0c5fb9d690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1894", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1894\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T01:00:07.506Z\n\ud83d\udccf Modified: 2025-03-04T01:00:07.506Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298412\n2. https://vuldb.com/?ctiid.298412\n3. https://vuldb.com/?submit.506592\n4. https://github.com/Maochuyue/cve/issues/1\n5. https://phpgurukul.com/", "creation_timestamp": "2025-03-04T02:30:46.000000Z"}, {"uuid": "4f33485e-66ca-4d4a-b8a4-6c168e49f8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1895", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1895\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T01:00:11.682Z\n\ud83d\udccf Modified: 2025-03-04T01:00:11.682Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298413\n2. https://vuldb.com/?ctiid.298413\n3. https://vuldb.com/?submit.506601\n4. https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_1.pdf\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-04T02:30:45.000000Z"}, {"uuid": "f995e96e-7dea-41ea-936e-a676e58765e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1896", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6310", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1896\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T01:31:05.653Z\n\ud83d\udccf Modified: 2025-03-04T01:31:05.653Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298414\n2. https://vuldb.com/?ctiid.298414\n3. https://vuldb.com/?submit.506602\n4. https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_2.pdf\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-04T02:30:45.000000Z"}, {"uuid": "c51f0474-46f9-4788-8582-dddd69032b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1897", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6309", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1897\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-04T01:31:09.420Z\n\ud83d\udccf Modified: 2025-03-04T01:31:09.420Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298415\n2. https://vuldb.com/?ctiid.298415\n3. https://vuldb.com/?submit.506604\n4. https://github.com/2664521593/mycve/blob/main/Tenda/TX3/tenda_tx3_bof_3.pdf\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-03-04T02:30:43.000000Z"}, {"uuid": "a2ee7493-8742-43bd-96f2-3763531bf1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1889\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not considered as part of the scope of picklescan, the file would pass security checks and appear to be safe, when it could instead prove to be problematic.\n\ud83d\udccf Published: 2025-03-03T18:38:10.046Z\n\ud83d\udccf Modified: 2025-03-04T11:24:31.773Z\n\ud83d\udd17 References:\n1. https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1889\n2. https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v", "creation_timestamp": "2025-03-04T11:30:36.000000Z"}, {"uuid": "ca2d9c63-f38c-4bc6-bb15-afc3b7c7af93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1881", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1881\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Video Footage/Live Video Stream. The manipulation leads to improper access controls. The attack can be launched remotely. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.\n\ud83d\udccf Published: 2025-03-03T20:31:04.041Z\n\ud83d\udccf Modified: 2025-03-04T15:12:01.820Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298195\n2. https://vuldb.com/?ctiid.298195\n3. https://vuldb.com/?submit.510952\n4. https://github.com/geo-chen/i-Drive", "creation_timestamp": "2025-03-04T15:31:16.000000Z"}, {"uuid": "f1889d0e-e203-41b5-a484-69ab6d4952d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1879", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6379", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1879\n\ud83d\udd25 CVSS Score: 2.4 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. It was not possible to identify the current maintainer of the product. It must be assumed that the product is end-of-life.\n\ud83d\udccf Published: 2025-03-03T19:31:04.880Z\n\ud83d\udccf Modified: 2025-03-04T15:13:54.562Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298193\n2. https://vuldb.com/?ctiid.298193\n3. https://vuldb.com/?submit.510950\n4. https://github.com/geo-chen/i-Drive", "creation_timestamp": "2025-03-04T15:31:12.000000Z"}, {"uuid": "5e13cdf9-5198-4bf6-9179-758f8ca44d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6830", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1886\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.\n\ud83d\udccf Published: 2025-03-07T10:55:40.416Z\n\ud83d\udccf Modified: 2025-03-07T10:55:40.416Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain", "creation_timestamp": "2025-03-07T11:34:48.000000Z"}, {"uuid": "28c1e8ec-efa0-4e71-b4e3-1a60ba091313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6829", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1887\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.\n\ud83d\udccf Published: 2025-03-07T10:56:52.391Z\n\ud83d\udccf Modified: 2025-03-07T10:56:52.391Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain", "creation_timestamp": "2025-03-07T11:34:47.000000Z"}, {"uuid": "ac730d07-ac22-4598-b74c-2883ea047b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1828\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions.\n\nCrypt::Random::rand 1.05 through 1.55 uses the rand() function.  If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available Crypt::Random will default to use the insecure Crypt::Random::rand provider.\n\nIn particular, Windows versions of perl will encounter this issue by default.\n\ud83d\udccf Published: 2025-03-10T23:51:33.279Z\n\ud83d\udccf Modified: 2025-03-10T23:51:33.279Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://github.com/perl-Crypt-OpenPGP/Crypt-Random/pull/1\n3. https://github.com/perl-Crypt-OpenPGP/Crypt-Random/commit/1f8b29e9e89d8d083fd025152e76ec918136cc05", "creation_timestamp": "2025-03-11T00:47:36.000000Z"}, {"uuid": "561d242d-571e-480f-a96c-00722121bc42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1828\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Crypt::Random Perl package 1.05 through 1.55 may use rand() function,\u00a0which is not\u00a0cryptographically strong,\u00a0for cryptographic functions.\n\nIf the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available\u00a0Crypt::Random will default to use the insecure\u00a0Crypt::Random::rand provider.\n\nIn particular, Windows versions of perl will encounter this issue by default.\n\ud83d\udccf Published: 2025-03-10T23:51:33.279Z\n\ud83d\udccf Modified: 2025-03-26T01:33:42.709Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://github.com/perl-Crypt-OpenPGP/Crypt-Random/pull/1\n3. https://github.com/perl-Crypt-OpenPGP/Crypt-Random/commit/1f8b29e9e89d8d083fd025152e76ec918136cc05", "creation_timestamp": "2025-03-26T02:25:04.000000Z"}, {"uuid": "3e4ed936-4fd9-47d4-9e66-5b0b60b700ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9246", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1860\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not\u00a0cryptographically secure,\u00a0for cryptographic functions.\n\ud83d\udccf Published: 2025-03-28T00:56:08.647Z\n\ud83d\udccf Modified: 2025-03-28T00:56:08.647Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://metacpan.org/release/ZEFRAM/Data-Entropy-0.007/source/lib/Data/Entropy.pm#L80", "creation_timestamp": "2025-03-28T01:26:59.000000Z"}, {"uuid": "84aa5b6b-a874-490b-8da7-230f7989d94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9544", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1861\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.\n\ud83d\udccf Published: 2025-03-30T05:57:57.894Z\n\ud83d\udccf Modified: 2025-03-30T05:57:57.894Z\n\ud83d\udd17 References:\n1. https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff", "creation_timestamp": "2025-03-30T06:32:00.000000Z"}, {"uuid": "5b8a6971-9365-4b36-b125-ccb936f3af39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1806", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1806\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.5.27.0 is able to address this issue. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-01T23:31:04.940Z\n\ud83d\udccf Modified: 2025-04-01T20:14:47.777Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298064\n2. https://vuldb.com/?ctiid.298064\n3. https://vuldb.com/?submit.502539\n4. https://drive.google.com/file/d/1WT5mJwL9NvKxBLIIj7TDbeAq6dchs5Gk/view?usp=sharing", "creation_timestamp": "2025-04-01T20:33:23.000000Z"}, {"uuid": "2822431b-6183-4a08-8b25-a56cc4dfe119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1865", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1865\n\ud83d\udd25 CVSS Score: 8.5 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM.\n\ud83d\udccf Published: 2025-04-04T09:52:56.627Z\n\ud83d\udccf Modified: 2025-04-04T14:24:50.114Z\n\ud83d\udd17 References:\n1. https://www.elby.ch/de/products/vcd.html", "creation_timestamp": "2025-04-04T14:36:00.000000Z"}, {"uuid": "6558c467-215f-46bc-9167-94d527288384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12393", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1863\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default setting of the authentication function is disabled on the affected products. Therefore, when connected to a network with default settings, anyone can access all functions related to settings and operations. As a result, an attacker can illegally manipulate and configure important data such as measured values and settings.\nThis issue affects GX10 / GX20 / GP10 / GP20 Paperless Recorders: R5.04.01 or earlier; GM Data Acquisition System: R5.05.01 or earlier; DX1000 / DX2000 / DX1000N Paperless Recorders: R4.21 or earlier; FX1000 Paperless Recorders: R1.31 or earlier; \u03bcR10000 / \u03bcR20000 Chart Recorders: R1.51 or earlier; MW100 Data Acquisition Units: All versions; DX1000T / DX2000T Paperless Recorders: All versions; CX1000 / CX2000 Paperless Recorders: All versions.\n\ud83d\udccf Published: 2025-04-18T05:55:26.303Z\n\ud83d\udccf Modified: 2025-04-18T05:55:26.303Z\n\ud83d\udd17 References:\n1. https://web-material3.yokogawa.com/1/36974/files/YSAR-25-0001-E.pdf", "creation_timestamp": "2025-04-18T06:58:26.000000Z"}, {"uuid": "3cf76223-3c01-4a97-9df9-fbf734a09259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1838", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1838\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM Cloud Pak for Business Automation\n\n 24.0.0 and 24.0.1 through 24.0.1 IF001 \n\nAuthoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.\n\ud83d\udccf Published: 2025-05-03T18:23:26.127Z\n\ud83d\udccf Modified: 2025-05-03T18:23:26.127Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7232429", "creation_timestamp": "2025-05-03T19:17:12.000000Z"}, {"uuid": "bbc2576a-c1c6-43d9-a6f6-0de551966eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1801\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the server to be jeopardized. A user session or confidential data might be vulnerable.\n\ud83d\udccf Published: 2025-03-03T15:03:15.439Z\n\ud83d\udccf Modified: 2025-05-21T19:15:20.949Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:1954\n2. https://access.redhat.com/security/cve/CVE-2025-1801\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2349081", "creation_timestamp": "2025-05-21T19:42:58.000000Z"}, {"uuid": "ce354dcf-68ac-43b5-9e9c-35139dc265be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1807", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10006", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1807\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the argument Title leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.5.27.0 is able to address this issue. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-02T00:00:08.805Z\n\ud83d\udccf Modified: 2025-04-01T20:14:44.698Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298065\n2. https://vuldb.com/?ctiid.298065\n3. https://vuldb.com/?submit.502668\n4. https://drive.google.com/file/d/1-4BwJxzKUdVRsi6PYh68mKzeIPAqug1Q/view", "creation_timestamp": "2025-04-01T20:33:24.000000Z"}, {"uuid": "67332ab2-8c52-43f4-97a7-b8287612fec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "seen", "source": "https://t.me/cvedetector/21512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1861 - Apache HTTP Server URL Truncation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1861 \nPublished : March 30, 2025, 6:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-30T10:34:17.000000Z"}, {"uuid": "0233554d-aa7a-4168-bc7a-34c64d0c5c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1860", "type": "seen", "source": "https://t.me/cvedetector/21356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1860 - Data::Entropy Perl Cryptographically Insecure Random Number Generation\", \n  \"Content\": \"CVE ID : CVE-2025-1860 \nPublished : March 28, 2025, 1:15 a.m. | 47\u00a0minutes ago \nDescription : Data::Entropy for Perl 0.007 and earlier use the rand() function as the default source of entropy, which is not\u00a0cryptographically secure,\u00a0for cryptographic functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T03:31:51.000000Z"}, {"uuid": "4f8a7f85-94f4-488a-bede-c9ffffdb4334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1805", "type": "seen", "source": "https://t.me/cvedetector/21873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1805 - Crypt::Salt for Perl Insecure Salt Generation\", \n  \"Content\": \"CVE ID : CVE-2025-1805 \nPublished : April 2, 2025, 1:15 p.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T16:39:32.000000Z"}, {"uuid": "de032eac-c8f7-48c6-bdd3-fcb6fce2d62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1888", "type": "seen", "source": "https://t.me/cvedetector/20317", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1888 - Leica Aperio Eslide Manager Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1888 \nPublished : March 14, 2025, 5:15 p.m. | 19\u00a0minutes ago \nDescription : The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the \"memo\" field. The memo field has a hover over action that will display a Microsoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T19:13:13.000000Z"}, {"uuid": "b94a111e-4feb-4fe5-9e0d-a60c7ca7ad24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1865", "type": "seen", "source": "https://t.me/cvedetector/22120", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1865 - Adobe Kernel Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1865 \nPublished : April 4, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T14:40:29.000000Z"}, {"uuid": "971d89d2-af11-492a-adbe-9379e86a3899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1802", "type": "seen", "source": "https://t.me/cvedetector/20728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1802 - HT Mega \u2013 Absolute Addons For Elementor Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-1802 \nPublished : March 20, 2025, 12:15 p.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018marker_title\u2019, 'notification_content', and 'stt_button_text' parameters in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.3. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T15:43:37.000000Z"}, {"uuid": "db267764-029c-4050-aaa3-c2c399ffd80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "Telegram/kGE7znziVcvsY6UwasR0mfz339GJHOD_PkHRy-g0DzIo-8pN", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "99e59b61-e016-4b8c-a609-65738b354864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1813", "type": "seen", "source": "Telegram/9xeHjlqe2FqnBwCwLppGpa3SHlCxjwuaPPoNHveS16LI4__y", "content": "", "creation_timestamp": "2025-03-02T11:47:01.000000Z"}, {"uuid": "59e4ca4c-fcd3-499a-b65a-0f7db3058b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1812", "type": "seen", "source": "Telegram/bJC7J5-9UmMHhjstwNBM-CojJtb8XDn_i8r1PMhTg4S49tAD", "content": "", "creation_timestamp": "2025-03-02T11:47:01.000000Z"}, {"uuid": "8518d9b2-cab0-4168-abcc-718cb2bfc3c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "seen", "source": "Telegram/KW4sBlnhS0NlcapGfwNPYzY0Or1l9iDeYYefojHp1sZxKJZg", "content": "", "creation_timestamp": "2025-03-02T11:47:01.000000Z"}, {"uuid": "9a6c5ba7-95a9-4283-875c-2f87ce55bce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1810", "type": "seen", "source": "Telegram/pgHXJroJ5-nyAwgbDSWfcxR_Pa_2AIocnvULheMp4v4gb0pA", "content": "", "creation_timestamp": "2025-03-02T11:47:01.000000Z"}, {"uuid": "cd9689c4-2e9a-44d5-831a-0391b6cf1d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1809", "type": "seen", "source": "Telegram/Pv950IGymhDVCapNWqaNoU4Vo5VDHPiDPj09WaTHRwzIy6Vo", "content": "", "creation_timestamp": "2025-03-02T11:47:01.000000Z"}, {"uuid": "f8a8c166-d48f-451b-8e4e-40af5205efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1808", "type": "seen", "source": "Telegram/R7aVRBsLi4cxodAMt23uApoi6ScaN2LEajLEAKPxy3hVCSXU", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}, {"uuid": "646a46b2-36b2-4766-b9b6-c159cd91fcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1807", "type": "seen", "source": "Telegram/GQRI_cmaYwq50QLYIgxg4V4d5z8GTmCbNS3C6KCZoV9fyOj5", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}, {"uuid": "6bfbd17b-07d1-45d5-ac4f-e2601f4d0bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1806", "type": "seen", "source": "Telegram/3NoH-7oshpjKtqmxX5Xy0ALBuRPRL0tBKm3a2Jr1fQ7YkLjS", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}, {"uuid": "79b125bf-cf1b-449c-a4f3-79d67af1c4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "Telegram/sotFv-zHlWKtWPKKCDPVvZZKJGz6QRidQdWey4YeDT4u5L7U", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}, {"uuid": "fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "Telegram/v7YHZFa_V2M_LD66W6E_bQC64cm1CdvwdicdpBTZJmZn3zVR", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}, {"uuid": "46a06328-784d-4bff-a4e2-e32f52a01a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "seen", "source": "Telegram/UKyrvsx_UXI75LTAWXepdT62t4IdaXVmNzvPXxH6FqNLtfrr", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "bbfc8eeb-904d-4965-aa73-ac80c440c40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1887", "type": "seen", "source": "Telegram/NKYRF98cEv1UXHwDFwZYy4IgaB8ufnG-sUCjjlSddaWmSXiS", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "92e45600-72a8-4cac-8257-2997bed97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "Telegram/rmRLXbLjvY-o2aa_eYtVcvnfT1RbVmMLZPiKO2yMNsYA-t7o", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "5245b73c-7954-4715-a705-c79f3b5f615b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1828", "type": "seen", "source": "Telegram/f4ZsrlYFUlwBNmdTDUcqPtWFi6o35m6asZGUPIJFbWEo8Qtm", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "49f2803c-0aaf-4828-b9b8-891bebb187fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1863", "type": "seen", "source": "Telegram/f5TN77Y84MrJWEHlEu4kVsDsQIlGnnad1ICMIEgRkWvMVwc", "content": "", "creation_timestamp": "2025-04-18T08:00:17.000000Z"}, {"uuid": "c2ffcd84-bba3-43e0-ba18-e52cb9e0d539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1851", "type": "published-proof-of-concept", "source": "Telegram/G7S_MNt4vA4vwCJEO5-geE_UNXmC_xYne0ka6jzyH6HmjSw", "content": "", "creation_timestamp": "2025-03-03T07:01:08.000000Z"}, {"uuid": "cd49b536-18e7-498e-a887-14b468370c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1804", "type": "seen", "source": "Telegram/QSI9pBdiZD4XB6B8xYWhYwTgbTHFrmdODd5OBVySn3LuZEM", "content": "", "creation_timestamp": "2025-03-01T20:30:18.000000Z"}, {"uuid": "275af671-9384-4862-a116-e65ac1bc0d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1850", "type": "published-proof-of-concept", "source": "Telegram/G7S_MNt4vA4vwCJEO5-geE_UNXmC_xYne0ka6jzyH6HmjSw", "content": "", "creation_timestamp": "2025-03-03T07:01:08.000000Z"}, {"uuid": "8f3ec569-afc5-48e4-9a5c-d005816d6314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1841", "type": "published-proof-of-concept", "source": "Telegram/pstnQ8ZZOX-2Yeq-UDXjBXIKQOIrf-BFgYyilC58DHdCcZU", "content": "", "creation_timestamp": "2025-03-03T01:30:33.000000Z"}, {"uuid": "67dee409-bd31-4aac-bff1-ff2b3d19a7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1840", "type": "published-proof-of-concept", "source": "Telegram/pstnQ8ZZOX-2Yeq-UDXjBXIKQOIrf-BFgYyilC58DHdCcZU", "content": "", "creation_timestamp": "2025-03-03T01:30:33.000000Z"}, {"uuid": "0786044e-0ca4-49ea-9296-211db2af7536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1808", "type": "published-proof-of-concept", "source": "Telegram/yqhHHpTMJThvOnMP9KSTnP0VqA7-wzWy3afb6m7cmgNDxD4", "content": "", "creation_timestamp": "2025-03-02T02:30:38.000000Z"}, {"uuid": "9f6b6f71-5e44-44b7-b450-3a61fac128cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1898", "type": "published-proof-of-concept", "source": "Telegram/_G-Dgh76ejdqy6O6AaeZLOjAjPiO1ICTKm7oDwNqDwOMGvk", "content": "", "creation_timestamp": "2025-03-04T04:01:29.000000Z"}, {"uuid": "53670a5b-de11-44ae-9889-5d1463b992ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1856", "type": "published-proof-of-concept", "source": "Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXO_MPOY24Pc", "content": "", "creation_timestamp": "2025-03-03T10:01:09.000000Z"}, {"uuid": "80819e9d-e2e0-400c-92d2-c09b194569fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1852", "type": "published-proof-of-concept", "source": "Telegram/s1tDRHXgLfdQ9VJvUjspEuZsvYj5yWDSGl5S3rlZuQQY84U", "content": "", "creation_timestamp": "2025-03-03T08:00:57.000000Z"}, {"uuid": "44c2a3c0-e217-462c-8c40-452e0e385ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1886", "type": "seen", "source": "Telegram/xNO8c93AXYGLx2Siqe1LKAuq4DJ9lYMZAzOaei3RNI_CrRc", "content": "", "creation_timestamp": "2025-03-07T13:01:06.000000Z"}, {"uuid": "e7c37e4f-0419-4e8e-8a2d-b40e8bd2962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1895", "type": "published-proof-of-concept", "source": "Telegram/OhOzFiNBdcckJZ_vwRpCCvFizXXllaBPV0MS5KHznSv3TyI", "content": "", "creation_timestamp": "2025-03-04T03:01:08.000000Z"}, {"uuid": "0f03bc2e-3af2-403c-a729-0393d84a6aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1894", "type": "published-proof-of-concept", "source": "Telegram/OhOzFiNBdcckJZ_vwRpCCvFizXXllaBPV0MS5KHznSv3TyI", "content": "", "creation_timestamp": "2025-03-04T03:01:08.000000Z"}, {"uuid": "aadefc2c-7a32-46d7-ab0f-432299c865e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1864", "type": "published-proof-of-concept", "source": "Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXO_MPOY24Pc", "content": "", "creation_timestamp": "2025-03-03T10:01:09.000000Z"}, {"uuid": "0d3d9fa0-d91c-4f30-9ab4-2810410cc4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1857", "type": "published-proof-of-concept", "source": "Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXO_MPOY24Pc", "content": "", "creation_timestamp": "2025-03-03T10:01:09.000000Z"}, {"uuid": "151af798-8283-4714-a00f-3cc4dd2d7a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1853", "type": "published-proof-of-concept", "source": "Telegram/s1tDRHXgLfdQ9VJvUjspEuZsvYj5yWDSGl5S3rlZuQQY84U", "content": "", "creation_timestamp": "2025-03-03T08:00:57.000000Z"}, {"uuid": "256c8715-a22a-411b-8944-40c7ca0148c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1896", "type": "published-proof-of-concept", "source": "Telegram/_G-Dgh76ejdqy6O6AaeZLOjAjPiO1ICTKm7oDwNqDwOMGvk", "content": "", "creation_timestamp": "2025-03-04T04:01:29.000000Z"}, {"uuid": "eb11842a-6612-494e-97e0-4f0e792dfb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1897", "type": "published-proof-of-concept", "source": "Telegram/_G-Dgh76ejdqy6O6AaeZLOjAjPiO1ICTKm7oDwNqDwOMGvk", "content": "", "creation_timestamp": "2025-03-04T04:01:29.000000Z"}, {"uuid": "bc8ff21a-9ca0-49ab-acb7-261e144aa6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1899", "type": "published-proof-of-concept", "source": "Telegram/_G-Dgh76ejdqy6O6AaeZLOjAjPiO1ICTKm7oDwNqDwOMGvk", "content": "", "creation_timestamp": "2025-03-04T04:01:29.000000Z"}, {"uuid": "bf9da33d-0c0b-4b33-9625-ed9adc949790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1815", "type": "published-proof-of-concept", "source": "Telegram/fwheIPsJmSFM0ebvN65KE_p1dkRQXAyFmCMnMmX-I34HoeA", "content": "", "creation_timestamp": "2025-03-02T13:30:15.000000Z"}, {"uuid": "42bf425d-6f0f-4193-abff-6bec14a666f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1814", "type": "published-proof-of-concept", "source": "Telegram/L8clxFNeayDFdqPM8SFS2E9Dp08idQIvxYA4NtE3ynofrJU", "content": "", "creation_timestamp": "2025-03-02T12:30:28.000000Z"}, {"uuid": "da88e3b9-d03d-4bc7-85c1-595460297b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1811", "type": "seen", "source": "Telegram/DnR08jUVHhOgLSrPRCgRVAW-PG6tJZROb7_alGwAeSUmZUo", "content": "", "creation_timestamp": "2025-03-02T10:30:21.000000Z"}, {"uuid": "55a57fac-a0f4-4dc5-9ee3-076db8362f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1809", "type": "published-proof-of-concept", "source": "Telegram/lOXGKBNtEaUqnh8uCvwAoHCudCU5oz45F7Jn-wyTn3ccTWc", "content": "", "creation_timestamp": "2025-03-02T07:30:30.000000Z"}, {"uuid": "03f6712e-abf7-4132-b539-bf35d249b701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1861", "type": "seen", "source": "https://t.me/anti_malware/20065", "content": "\ud83d\udee0\ufe0f PHP \u0441\u043d\u043e\u0432\u0430 \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u044b: \u043d\u0430 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0435\u043d\u044c\u0448\u0435, \u043d\u043e \u0440\u0438\u0441\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u043d\u0430\u0442\u043d\u044b\u0435! \ud83d\udc18\ud83d\udca8\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u044f\u043b\u0438 \u043c\u043e\u043b\u043e\u0442\u043e\u043a \u0438 \u0437\u0430\u043a\u043e\u043b\u043e\u0442\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u044b\u0440 \u0432 \u043a\u043e\u0434\u0435! \ud83d\udd28\ud83d\udea7 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u0430\u0448\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u0438\u0439 \u0441\u044b\u0440 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \ud83e\uddc0\n\n\ud83e\ude79 CVE-2025-1861 \u2014 \ud83e\udd26\u200d\u2642\ufe0f \u0411\u0443\u0444\u0435\u0440 \u043f\u043e\u0434 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Location \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043c\u0430\u043b\u043e\u0432\u0430\u0442 (1024 \u0431\u0430\u0439\u0442\u0430 \u0432\u043c\u0435\u0441\u0442\u043e 8000). \u0418\u0442\u043e\u0433: \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0441\u0442\u044c \u0432\u0430\u0436\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u0438 URI \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043b\u0443\u0447\u0438\u0442\u044c\u0441\u044f \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u0445\u0430\u043e\u0441! \ud83d\udd04\n\ud83e\ude79 CVE-2025-1734 \u2014 \ud83d\udd75\ufe0f\u200d\u2642\ufe0f \u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0431\u0435\u0437 \u0434\u0432\u043e\u0435\u0442\u043e\u0447\u0438\u044f \u0438\u043b\u0438 \u0441 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u043c \u043f\u0435\u0440\u0435\u0434 \u043d\u0438\u043c \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c request smuggling \u0438 \u0448\u043f\u0438\u043e\u043d\u0438\u0442\u044c \u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438! \ud83d\ude08\n\ud83e\ude79 CVE-2025-1217 \u2014 \ud83d\udcdc \u041f\u0430\u0440\u0441\u0435\u0440 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u043b \u0441\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438, \u0447\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0441\u043b\u043e\u043c\u0430\u0442\u044c MIME-\u0442\u0438\u043f\u044b \u0438 \u043f\u043e\u0434\u043f\u043e\u0440\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432. \ud83c\udfad\n\ud83e\ude79 CVE-2025-1219 \u2014 \ud83d\udd04 libxml \u043f\u0443\u0442\u0430\u043b\u0441\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438. \u041a\u0442\u043e \u0442\u0430\u043c \u0445\u043e\u0442\u0435\u043b \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u00bb? \ud83c\udfab\ud83d\udeaa\n\ud83e\ude79 CVE-2025-1736 \u2014 \ud83d\udce1 \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 check_has_header \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Authorization) \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c. \u042d\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \ud83e\udd37\u200d\u2642\ufe0f", "creation_timestamp": "2025-03-18T18:06:01.000000Z"}, {"uuid": "6757191d-d73f-4c87-a57e-45e3a9a6e474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1838", "type": "seen", "source": "https://t.me/cvedetector/24407", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1838 - IBM Cloud Pak for Business Automation Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1838 \nPublished : May 3, 2025, 7:15 p.m. | 47\u00a0minutes ago \nDescription : IBM Cloud Pak for Business Automation  \n  \n 24.0.0 and 24.0.1 through 24.0.1 IF001   \n  \nAuthoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-03T22:03:38.000000Z"}, {"uuid": "224d9f21-762c-40ba-9a5b-3f70cd6c6351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-1889", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-769v-p64c-89pr", "content": "", "creation_timestamp": "2025-03-03T19:59:46.000000Z"}]}