{"vulnerability": "CVE-2025-3409", "sightings": [{"uuid": "7718efd6-12c4-4414-b755-a88049aeca53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34090", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114785536770188510", "content": "", "creation_timestamp": "2025-07-02T20:31:33.412768Z"}, {"uuid": "dc43fe40-4285-4f4a-896d-0302e29a025e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz3xhli4h2p", "content": "", "creation_timestamp": "2025-07-02T20:55:24.972002Z"}, {"uuid": "558b75ea-48f5-4fc8-8ee3-31e9d822cc4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4ylr4o62q", "content": "", "creation_timestamp": "2025-07-02T21:13:56.713428Z"}, {"uuid": "38d752fc-354a-4c57-ac83-1a9cd0077bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsz7dzxrln2a", "content": "", "creation_timestamp": "2025-07-02T21:56:08.230614Z"}, {"uuid": "36d3338f-8cde-4ddb-baa3-6f38946218e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34093", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "33fb0866-12bd-433e-ab95-9ff5b37ce6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34095", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "efa2c7c3-43b3-4f9e-944f-98ea9ba6b44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34099", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "602d9a92-fb3a-4c64-805c-fb4fe995d133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34096", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "3ff1f6f1-a3dc-4f58-86ed-7efcbccc5ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34097", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "a1f81707-96a9-42fd-82f6-3eb0d055b046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34098", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "f9bf10b6-4f9a-4173-9fd7-26d163306102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34098", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/riverbed_steelhead_vcx_file_read.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "57f0e04e-b789-44ad-84cc-3c61d6d6aa8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34097", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/processmaker_plugin_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "56be65b7-c516-4f33-90ee-42b622494af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34095", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/makoserver_cmd_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b62ed52c-76bb-408b-af36-59d531a64325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34093", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/polycom_hdx_traceroute_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "cbb87c9e-6677-4970-8499-9eabe09aa354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34096", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/easyfilesharing_post.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "deeda419-48f0-456f-a4cf-f5d47537e0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34099", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/vicidial_user_authorization_unauth_cmd_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "29f58992-02d1-40c1-b1f6-e5bb03c3dde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34095", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:40.000000Z"}, {"uuid": "97d9350f-a9da-49a7-9d6a-86ff07e9111f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34099", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:40.000000Z"}, {"uuid": "d2dfdfa4-6675-49d5-bb80-37ba156cf7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3409\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-08T04:31:03.810Z\n\ud83d\udccf Modified: 2025-04-08T04:31:03.810Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303687\n2. https://vuldb.com/?ctiid.303687\n3. https://vuldb.com/?submit.544231", "creation_timestamp": "2025-04-08T04:46:34.000000Z"}, {"uuid": "b233443b-e261-444e-a32a-3553214f7517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3409", "type": "seen", "source": "https://t.me/cvedetector/22398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3409 - Nothings stb Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3409 \nPublished : April 8, 2025, 5:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:31.000000Z"}, {"uuid": "3c026991-6af3-4cd6-9562-75514bb5629b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3409", "type": "seen", "source": "Telegram/GhCcQwP6QnMjxsfMJ8qz6Pxy9JaPQ-Bi2BXFCcmddlxOyKI", "content": "", "creation_timestamp": "2025-04-08T07:01:28.000000Z"}, {"uuid": "584d9450-2e23-4857-971c-8f95acc448c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34098", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/riverbed_steelhead_vcx_file_read.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Gregory DRAPERI \", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an authenticated arbitrary file read in the log module's filter engine.\\n          SteelHead VCX (VCX255U) version 9.6.0a was confirmed as vulnerable.\", \"disclosure_date\": \"2017-06-01\", \"fullname\": \"auxiliary/scanner/http/riverbed_steelhead_vcx_file_read\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"Riverbed SteelHead VCX File Read\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/riverbed_steelhead_vcx_file_read.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/riverbed_steelhead_vcx_file_read\", \"references\": [\"CVE-2025-34098\", \"EDB-42101\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:50.880335Z"}, {"uuid": "b095efdc-ccf6-4b3c-a888-fdfaef79bf15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34096", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/easyfilesharing_post.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"bl4ck h4ck3r\", \"Marco Rivoli \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a POST buffer overflow in the Easy File Sharing FTP Server 7.2 software.\", \"disclosure_date\": \"2017-06-12\", \"fullname\": \"exploit/windows/http/easyfilesharing_post\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Easy File Sharing HTTP Server 7.2 POST Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/easyfilesharing_post.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/http/easyfilesharing_post\", \"references\": [\"CVE-2025-34096\", \"EDB-42186\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Easy File Sharing 7.2 HTTP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:45.589907Z"}, {"uuid": "995dcecf-5224-4dfb-93a2-96e9f64f0a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34095", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/makoserver_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"John Page (hyp3rlinx) - Beyond Security SecuriTeam Secure Disclosure\", \"Steven Patterson (Shogun Lab) \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Mako Server v2.5, 2.6.\\n          It's possible to inject arbitrary OS commands in the Mako Server\\n          tutorial page through a PUT request to save.lsp.\\n\\n          Attacker input will be saved on the victims machine and can\\n          be executed by sending a GET request to manage.lsp.\", \"disclosure_date\": \"2017-09-03\", \"fullname\": \"exploit/multi/http/makoserver_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Mako Server v2.5, 2.6 OS Command Injection RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/makoserver_cmd_exec.rb\", \"platform\": \"Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/makoserver_cmd_exec\", \"references\": [\"CVE-2025-34095\", \"EDB-42683\", \"URL-https://blogs.securiteam.com/index.php/archives/3391\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Mako Server v2.5, 2.6\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.445812Z"}, {"uuid": "f5528622-16f4-4f74-b328-65855058c74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34097", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/processmaker_plugin_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will generate and upload a plugin to ProcessMaker\\n          resulting in execution of PHP code as the web server user.\\n\\n          Credentials for a valid user account with Administrator roles\\n          is required to run this module.\\n\\n          This module has been tested successfully on ProcessMaker versions\\n          1.6-4276, 2.0.23, 3.0 RC 1, 3.2.0, 3.2.1 on Windows 7 SP 1;\\n          and version 3.2.0 on Debian Linux 8.\", \"disclosure_date\": \"2010-08-25\", \"fullname\": \"exploit/multi/http/processmaker_plugin_upload\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"ProcessMaker Plugin Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/processmaker_plugin_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/processmaker_plugin_upload\", \"references\": [\"CVE-2025-34097\", \"URL-http://wiki.processmaker.com/3.0/Plugin_Development\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:09.907698Z"}, {"uuid": "99bae357-0be4-452d-8d53-03426dc33dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34093", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/misc/polycom_hdx_traceroute_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Mumbai\", \"staaldraad\", \"Paul Haas \", \"h00die \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Within Polycom command shell, a command execution flaw exists in\\n          lan traceroute, one of the dev commands, which allows for an\\n          attacker to execute arbitrary payloads with telnet or openssl.\", \"disclosure_date\": \"2017-11-12\", \"fullname\": \"exploit/unix/misc/polycom_hdx_traceroute_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Polycom Shell HDX Series Traceroute Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/misc/polycom_hdx_traceroute_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/misc/polycom_hdx_traceroute_exec\", \"references\": [\"CVE-2025-34093\", \"URL-https://staaldraad.github.io/2017/11/12/polycom-hdx-rce/\"], \"rport\": 23, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:38.784318Z"}, {"uuid": "5bda02c4-74b0-491e-bc5f-ec5c4529cc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34099", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/vicidial_user_authorization_unauth_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in VICIdial versions\\n          2.9 RC 1 to 2.13 RC1 which allows unauthenticated users\\n          to execute arbitrary operating system commands as the web\\n          server user if password encryption is enabled (disabled\\n          by default).\\n\\n          When password encryption is enabled the user's password\\n          supplied using HTTP basic authentication is used in a call\\n          to exec().\\n\\n          This module has been tested successfully on version 2.11 RC2\\n          and 2.13 RC1 on CentOS.\", \"disclosure_date\": \"2017-05-26\", \"fullname\": \"exploit/unix/webapp/vicidial_user_authorization_unauth_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"VICIdial user_authorization Unauthenticated Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/vicidial_user_authorization_unauth_cmd_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/vicidial_user_authorization_unauth_cmd_exec\", \"references\": [\"CVE-2025-34099\", \"URL-http://www.vicidial.org/VICIDIALmantis/view.php?id=1016\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:49.326257Z"}]}