{"vulnerability": "CVE-2025-2984", "sightings": [{"uuid": "b3ab9061-3014-440f-830d-a362c9ed0a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29841", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}, {"uuid": "d94dad71-6019-4ab4-9da3-3c29a1fff6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29842", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}, {"uuid": "c15335a0-6b06-4f63-992d-ae48a6758450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29847", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/174", "content": "", "creation_timestamp": "2025-09-19T13:59:25.000000Z"}, {"uuid": "e13658f9-dbc4-487c-9af0-a96c10e76b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29841", "type": "seen", "source": "https://bsky.app/profile/bsidescbr.bsky.social/post/3lujmqtepnc2a", "content": "", "creation_timestamp": "2025-07-22T04:03:52.359603Z"}, {"uuid": "0c5d67b1-d443-4785-a8eb-aa1d3e4bb1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29847", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lz7cgk4p7b2m", "content": "", "creation_timestamp": "2025-09-19T16:38:21.757017Z"}, {"uuid": "6d706874-00e4-4df4-b645-31fad23438dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29840", "type": "seen", "source": "https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review", "content": "", "creation_timestamp": "2025-05-13T16:27:02.000000Z"}, {"uuid": "cd53f500-9656-41d3-b223-5dccabdc2622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcrkykloqz2f", "content": "", "creation_timestamp": "2026-01-19T11:46:16.039633Z"}, {"uuid": "9838a18d-c792-4805-aed1-9f283ee381de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29847", "type": "seen", "source": "https://gist.github.com/Darkcrai86/93ae837cfec5dfb766eabdff46a41c4f", "content": "", "creation_timestamp": "2026-01-19T17:28:26.000000Z"}, {"uuid": "1117121c-0651-4c5c-8026-36f9caf9642e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29842", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16192", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29842\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.\n\ud83d\udccf Published: 2025-05-13T16:59:03.789Z\n\ud83d\udccf Modified: 2025-05-13T18:07:52.202Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29842", "creation_timestamp": "2025-05-13T18:31:01.000000Z"}, {"uuid": "193ccb28-a2ab-4a0d-a926-c7dcf5e73cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29847", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcuozpbgo727", "content": "", "creation_timestamp": "2026-01-20T17:36:29.395308Z"}, {"uuid": "c65eb0a8-97d6-4f44-a3e7-b3ee4144e3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2984", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2984\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument emp_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-31T08:31:05.022Z\n\ud83d\udccf Modified: 2025-03-31T08:31:05.022Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.302036\n2. https://vuldb.com/?ctiid.302036\n3. https://vuldb.com/?submit.523343\n4. https://github.com/LispTexd/cve/blob/main/cve.md\n5. https://code-projects.org/", "creation_timestamp": "2025-03-31T09:31:11.000000Z"}, {"uuid": "340222a9-46aa-45da-b801-6fe5f881efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2984", "type": "seen", "source": "https://t.me/cvedetector/21574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2984 - \"Code-Projects Payroll Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2984 \nPublished : March 31, 2025, 9:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument emp_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T13:20:22.000000Z"}, {"uuid": "8ee9177b-425f-4d63-b7fd-ac4301307cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29841", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16272", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29841\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.\n\ud83d\udccf Published: 2025-05-13T16:59:03.238Z\n\ud83d\udccf Modified: 2025-05-13T21:40:28.680Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29841", "creation_timestamp": "2025-05-13T22:31:05.000000Z"}, {"uuid": "fbf60394-b1ee-43a4-bfa2-37603924f1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29840", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29840\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.\n\ud83d\udccf Published: 2025-05-13T16:59:02.573Z\n\ud83d\udccf Modified: 2025-05-14T04:00:30.865Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29840", "creation_timestamp": "2025-05-14T04:32:02.000000Z"}]}