{"vulnerability": "CVE-2025-3407", "sightings": [{"uuid": "e5f1f88d-5ae7-480e-97e8-3ab48dbad7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lt3muwwank24", "content": "", "creation_timestamp": "2025-07-03T21:03:34.080954Z"}, {"uuid": "59367077-6331-4564-afaf-a9991b693ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwo2pgz2c", "content": "", "creation_timestamp": "2025-04-08T05:17:50.084646Z"}, {"uuid": "eec2e748-b547-418f-aed2-2a7730d84e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lt47zhnvqa2g", "content": "", "creation_timestamp": "2025-07-04T02:46:06.997323Z"}, {"uuid": "b98dad0f-d04b-4574-8706-2c67d53e3a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34070", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114784141478579135", "content": "", "creation_timestamp": "2025-07-02T14:36:45.118706Z"}, {"uuid": "e16292f1-218f-4dc6-aeb9-a9672ae04105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34071", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114784141478579135", "content": "", "creation_timestamp": "2025-07-02T14:36:45.217214Z"}, {"uuid": "3ff3c98e-5033-47f2-880c-777bfa7ecb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34072", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114784357394772063", "content": "", "creation_timestamp": "2025-07-02T15:31:37.812613Z"}, {"uuid": "818f78f3-b24e-40cc-934f-f78605c93006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4afz3ne2i", "content": "", "creation_timestamp": "2025-07-02T21:00:25.557065Z"}, {"uuid": "9fa72196-08f0-43d8-9c8c-5423aa5f4f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4sctoi42q", "content": "", "creation_timestamp": "2025-07-02T21:10:26.116934Z"}, {"uuid": "6dbf03cb-ac09-4b7d-a6b8-02d526375a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34076", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4u4dvxf2r", "content": "", "creation_timestamp": "2025-07-02T21:11:26.338250Z"}, {"uuid": "dd65c647-738b-4cdc-a68c-40d29aa2e397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz5pkaxav2r", "content": "", "creation_timestamp": "2025-07-02T21:26:46.952952Z"}, {"uuid": "0490a92f-fc4a-4366-a028-e523d0a625e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz733jjdy2p", "content": "", "creation_timestamp": "2025-07-02T21:51:08.349567Z"}, {"uuid": "392aece1-f666-45bb-a324-dc82af737a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34073", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt65boaqfs2s", "content": "", "creation_timestamp": "2025-07-04T21:02:22.664539Z"}, {"uuid": "ef50d86d-8802-48fc-960f-5b9c603c98be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw56l46m24", "content": "", "creation_timestamp": "2025-07-23T21:02:34.336346Z"}, {"uuid": "21ab62e4-9599-47d1-be3d-af7082c67084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34073", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "077d0c74-f968-4022-8644-58d09634490a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "01b7baee-b3dc-4f4d-a494-171c4d820840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34076", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "69258bba-1b36-4b6d-8236-3e6168eecf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "9af2d0c3-c14d-4a61-aec5-80022cc6d5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34078", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "572ca6c7-98b1-41e6-98a5-f8eab076f2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34079", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "7d5d9228-4025-4f3e-8f01-53048a72eab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34077.yaml", "content": "", "creation_timestamp": "2025-07-27T04:19:38.000000Z"}, {"uuid": "2cfe838c-dc8a-4686-bb55-9a6d40ede36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lv2ihrrmsf24", "content": "", "creation_timestamp": "2025-07-28T21:02:20.682728Z"}, {"uuid": "92de9d23-2434-4906-9128-ee4c65b9f2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxqmuq2b", "content": "", "creation_timestamp": "2025-08-03T21:03:01.413281Z"}, {"uuid": "351b72f9-7a54-448c-8b82-6c68d738c901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "ece9fc00-8be3-46d1-9d00-b0ac37d3a911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:21.000000Z"}, {"uuid": "981d7b62-c6df-4673-84a6-1a4235cc3ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34073", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwhquyqtu72b", "content": "", "creation_timestamp": "2025-08-15T21:02:43.086852Z"}, {"uuid": "d4deb3eb-dfbd-4c48-b898-0e6d2f51944c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34076", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/microweber_lfi.rb", "content": "", "creation_timestamp": "2022-02-22T18:41:15.000000Z"}, {"uuid": "1b98a057-dab3-4eee-9bbb-c349178b1ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/lucee_scheduled_job.rb", "content": "", "creation_timestamp": "2023-03-02T14:13:23.000000Z"}, {"uuid": "e507ad39-896a-4cae-9385-b74728d82bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34079", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nscp_authenticated_rce.rb", "content": "", "creation_timestamp": "2021-06-09T14:45:50.000000Z"}, {"uuid": "a10dbac0-b2bb-4fe9-9936-e0d2df8181f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb", "content": "", "creation_timestamp": "2021-11-02T14:37:05.000000Z"}, {"uuid": "3333b417-e844-4dc2-9182-0be749d32ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34073", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/maltrail_rce.rb", "content": "", "creation_timestamp": "2023-08-16T22:01:49.000000Z"}, {"uuid": "5069d025-436b-4529-803d-91ed1438ad02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34078", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/nscp_pe.rb", "content": "", "creation_timestamp": "2021-07-06T15:15:07.000000Z"}, {"uuid": "6239cd3e-c8fa-40ff-9e12-247d35f0fb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/_uEPSzFNr6HqJN1CCE1x2MfixnAoe1zyVBXupCwzjdQjfEc", "content": "", "creation_timestamp": "2026-04-09T21:00:05.000000Z"}, {"uuid": "1006c630-0607-4a8e-b78d-92ddbfa31189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34070", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1216", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0633\u0631\u0648\u06cc\u0633 GFIAgent \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 Kerio Control \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0639\u062f\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u0639\u0645\u0644\u06a9\u0631\u062f \u062d\u06cc\u0627\u062a\u06cc \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u06cc \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0642\u062f\u0627\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc HTTP \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc\u200c\u0634\u062f\u0647 \u062e\u0627\u0635\u060c \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0648\u062c\u0648\u062f \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f.\n\nBDU:2025-07977\nCVE-2025-34070\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u067e\u0648\u0631\u062a\u200c\u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 \u06f7\u06f9\u06f9\u06f5 \u0648 \u06f7\u06f9\u06f9\u06f6\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0648\u0631\u062a\u200c\u0647\u0627\u06cc \u0634\u0628\u06a9\u0647 \u063a\u06cc\u0631 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 GFIAgent\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0637\u0631\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\"\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc\u060c \u062b\u0628\u062a) \u0648 \u067e\u0627\u0633\u062e \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc\u06cc \u0628\u0631\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646.\n\n\u0645\u0646\u0627\u0628\u0639 \u0627\u0637\u0644\u0627\u0639\u0627\u062a:\nhttps://ssd-disclosure.com/ssd-advisory-kerio-control-authentication-bypass-and-rce/\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-04T15:45:18.000000Z"}, {"uuid": "874ad9e2-29bb-4fd5-a5bd-abf9bae86f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/Qg5H5RrMFMk89xXvw_AzTeYXDboG-6t4YxNm39dIbZW6yTo", "content": "", "creation_timestamp": "2025-07-28T23:00:09.000000Z"}, {"uuid": "cf18fc13-6f1b-4a63-9e5c-8401abed5a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/o8ZKoWV2Y_A2XRg1P8qW1kiSLgUFj0IHGqQJ6A5ARyKaU-0", "content": "", "creation_timestamp": "2025-07-29T03:00:05.000000Z"}, {"uuid": "775eb31a-c7b3-47fc-8023-7e09ae4a88ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/VL2zkodKXJ4s7-qnqkcGB4g3iOsCKYXSgneWGoW9UEmWyHE", "content": "", "creation_timestamp": "2025-07-10T03:00:13.000000Z"}, {"uuid": "d76faae0-ad5c-4356-925d-4a470de10128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/j9hhUGrn1UjsT61HvOuwLNUknuYr4whXlqdhwz-FvQYkdb4", "content": "", "creation_timestamp": "2025-07-10T07:00:11.000000Z"}, {"uuid": "32b599dc-fed5-4776-b16e-ba47818280cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3407", "type": "seen", "source": "https://t.me/cvedetector/22385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3407 - Nothings stb Out-of-Bounds Read Vulnerability in stbhw_build_tileset_from_image\", \n  \"Content\": \"CVE ID : CVE-2025-3407 \nPublished : April 8, 2025, 4:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build_tileset_from_image. The manipulation of the argument h_count/v_count leads to out-of-bounds read. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T08:08:02.000000Z"}, {"uuid": "ceacf5a4-f2f5-45ca-84f6-d0c37ecd4d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3407", "type": "seen", "source": "Telegram/GhCcQwP6QnMjxsfMJ8qz6Pxy9JaPQ-Bi2BXFCcmddlxOyKI", "content": "", "creation_timestamp": "2025-04-08T07:01:28.000000Z"}, {"uuid": "ab6fde57-e8a6-449b-a18a-b76c4ed0b439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/362", "content": "CVE-2025-34077\n\nAn authentication bypass vulnerability exists in the WordPress Pie Register plugin = 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n\nGitHub Link:\nhttps://github.com/salimelh94/Web-Penetration-Test", "creation_timestamp": "2026-08-28T00:00:30.665050Z"}, {"uuid": "06f9dc80-8102-4fcb-9411-b8245def31e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://t.me/cve0day/362", "content": "CVE-2025-34077\n\nAn authentication bypass vulnerability exists in the WordPress Pie Register plugin = 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.\n\nGitHub Link:\nhttps://github.com/salimelh94/Web-Penetration-Test", "creation_timestamp": "2026-08-27T15:00:09.043278Z"}, {"uuid": "c2315552-e8c2-4c87-816c-f63c402e3b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "content": "", "creation_timestamp": "2026-09-07T20:00:04.067397Z"}, {"uuid": "beb6db87-8975-40e3-bef7-3457646b7a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "published-proof-of-concept", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "content": "", "creation_timestamp": "2026-09-08T00:00:24.613312Z"}, {"uuid": "d997dc5a-8ffc-49b3-bf7b-ffd1e1176fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34076", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/microweber_lfi.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Talha Karakumru \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Microweber CMS v1.2.10 has a backup functionality. Upload and download endpoints can be combined to read any file from the filesystem.\\n          Upload function may delete the local file if the web service user has access.\", \"disclosure_date\": \"2022-01-30\", \"fullname\": \"auxiliary/gather/microweber_lfi\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Microweber CMS v1.2.10 Local File Inclusion (Authenticated)\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"os-resource-loss\"]}, \"path\": \"/modules/auxiliary/gather/microweber_lfi.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/microweber_lfi\", \"references\": [\"CVE-2025-34076\", \"URL-https://huntr.dev/bounties/09218d3f-1f6a-48ae-981c-85e86ad5ed8b/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:17.863664Z"}, {"uuid": "d6003fcc-0ec4-4d7a-b100-ea5c7850cfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34074", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/lucee_scheduled_job.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Alexander Philiotis\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module can be used to execute a payload on Lucee servers that have an exposed\\n          administrative web interface. It's possible for an administrator to create a\\n          scheduled job that queries a remote ColdFusion file, which is then downloaded and executed\\n          when accessed. The payload is uploaded as a cfm file when queried by the target server. When executed,\\n          the payload will run as the user specified during the Lucee installation. On Windows, this is a service account;\\n          on Linux, it is either the root user or lucee.\", \"disclosure_date\": \"2023-02-10\", \"fullname\": \"exploit/multi/http/lucee_scheduled_job\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Lucee Authenticated Scheduled Job Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/lucee_scheduled_job.rb\", \"platform\": \"Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/lucee_scheduled_job\", \"references\": [\"CVE-2025-34074\", \"URL-https://docs.lucee.org/\", \"URL-https://docs.lucee.org/reference/tags/execute.html\", \"URL-https://docs.lucee.org/reference/tags/script.html\"], \"rport\": 8888, \"session_types\": false, \"targets\": [\"Windows Command\", \"Unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:00.943416Z"}, {"uuid": "45d5861d-305b-43b2-8476-593f616e092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34073", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/maltrail_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Ege BALCI \", \"Valentin Lobstein\", \"Chris Wild\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Maltrail is a malicious traffic detection system, utilizing publicly\\n          available blacklists containing malicious and/or generally suspicious trails.\\n          The Maltrail versions <= 0.54 is suffering from a command injection vulnerability.\\n          The `subprocess.check_output` function in `mailtrail/core/httpd.py` contains\\n          a command injection vulnerability in the `params.get(\\\"username\\\")` parameter.\\n          An attacker can exploit this vulnerability by injecting arbitrary OS commands\\n          into the username parameter. The injected commands will be executed with the\\n          privileges of the running process. This vulnerability can be exploited remotely\\n          without authentication.\\n\\n          Successfully tested against Maltrail versions 0.52 and 0.53.\", \"disclosure_date\": \"2023-07-31\", \"fullname\": \"exploit/unix/http/maltrail_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Maltrail Unauthenticated Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/http/maltrail_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/http/maltrail_rce\", \"references\": [\"CVE-2025-34073\", \"EDB-51676\", \"URL-https://huntr.dev/bounties/be3c5204-fbd9-448d-b97c-96a8d2941e87/\", \"URL-https://github.com/stamparm/maltrail/issues/19146\"], \"rport\": 8338, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:36.689403Z"}, {"uuid": "d52f6a06-97bd-4b67-a7ca-8ba26988eab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34077", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"h00die\", \"Lotfi13-DZ\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses an authentication bypass vulnerability in\\n          Wordpress Plugin Pie Register <= 3.7.1.4 to generate a valid cookie.\\n          With this cookie, hopefully of the admin, it will generate a plugin,\\n          pack the payload into it and upload it to a server running WordPress.\", \"disclosure_date\": \"2021-10-08\", \"fullname\": \"exploit/unix/webapp/wp_pie_register_bypass_rce\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"WordPress Plugin Pie Register Auth Bypass to RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_pie_register_bypass_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_pie_register_bypass_rce\", \"references\": [\"CVE-2025-34077\", \"EDB-50395\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WordPress\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:51.390374Z"}, {"uuid": "b53ee995-18a3-4203-a4e5-90601bf8d894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34079", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/nscp_authenticated_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"kindredsec\", \"Yann Castel (yann.castel \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module allows an attacker with knowledge of the admin password of NSClient++\\n          to start a privilege shell.\\n          For this module to work, both web interface of NSClient++ and `ExternalScripts` feature\\n          should be enabled.\", \"disclosure_date\": \"2020-10-20\", \"fullname\": \"exploit/windows/http/nscp_authenticated_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"NSClient++ 0.5.2.35 - ExternalScripts Authenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/nscp_authenticated_rce.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"windows/http/nscp_authenticated_rce\", \"references\": [\"CVE-2025-34079\", \"EDB-48360\", \"ATT&CK-T1021\"], \"rport\": 8443, \"session_types\": false, \"targets\": [\"Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:56.216889Z"}, {"uuid": "17201774-dc83-4230-a274-a3c63b20f8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34078", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/nscp_pe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"kindredsec\", \"BZYO\", \"Yann Castel (yann.castel \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module allows an attacker with an unprivileged windows account to gain admin access on windows system and start a shell.\\n          For this module to work, both the NSClient++ web interface  and `ExternalScripts` features must be enabled.\\n          You must also know where the NSClient config file is, as it is used to read the admin password which is stored in clear text.\", \"disclosure_date\": \"2020-10-20\", \"fullname\": \"exploit/windows/local/nscp_pe\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"NSClient++ 0.5.2.35 - Privilege escalation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/local/nscp_pe.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/local/nscp_pe\", \"references\": [\"CVE-2025-34078\", \"EDB-48360\", \"EDB-46802\"], \"rport\": 8443, \"session_types\": [], \"targets\": [\"Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:12.256039Z"}]}