{"vulnerability": "CVE-2025-4418", "sightings": [{"uuid": "dc4df9b8-c1ed-4987-b87a-b98c2df1a39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44180", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44180\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}.\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T16:12:38.551Z\n\ud83d\udd17 References:\n1. https://phpgurukul.com/vehicle-record-system-using-php-and-mysql/\n2. https://github.com/nscerol/Vehicle-Record-Management-System/blob/main/CVE-2025-44180-Vehicle-Record-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md", "creation_timestamp": "2025-05-15T16:35:22.000000Z"}, {"uuid": "31064970-eadb-4e3f-bd0d-9a602ff96b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvgq5vg2e", "content": "", "creation_timestamp": "2025-05-15T15:03:11.882528Z"}, {"uuid": "f0816bcd-ab8b-4153-816d-6cd1de2c57c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvgzb442n", "content": "", "creation_timestamp": "2025-05-15T15:03:12.643764Z"}, {"uuid": "41dd744c-2b4d-4ea8-9e50-55863b8d6a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44182", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvh4hts2t", "content": "", "creation_timestamp": "2025-05-15T15:03:13.274298Z"}, {"uuid": "6bd65528-9c79-4886-885f-0605aabf0040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvho3kw2p", "content": "", "creation_timestamp": "2025-05-15T15:03:17.550678Z"}, {"uuid": "8502a9db-0d06-4e18-af02-a165b81d90d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4418", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-09", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "cb78d612-06c2-4e31-a9ad-30a710cbb413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44184", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44184\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T16:21:44.685Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html\n2. https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44184-SourceCodester-Best-Employee-Management-System-1.0-Stored%20XSS.md", "creation_timestamp": "2025-05-14T16:33:37.000000Z"}, {"uuid": "4be4e38a-e4b2-4ef0-8e4f-4a91b8386445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44185", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16519", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44185\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T14:18:25.703Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html\n2. https://www.sourcecodester.com/sites/default/files/download/mayuri_k/_hr_soft_updated.zip\n3. https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44185-SourceCodester-Best-Employee-Management-System-1.0-CSRF-in-Password-Change.md", "creation_timestamp": "2025-05-15T14:35:26.000000Z"}, {"uuid": "6875470e-290e-4c80-bf98-a42b975e58f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44183", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44183\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T19:25:22.100Z\n\ud83d\udd17 References:\n1. https://phpgurukul.com/vehicle-record-system-using-php-and-mysql/\n2. https://github.com/nscerol/Vehicle-Record-Management-System/blob/main/CVE-2025-44183-Vehicle-Record-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md", "creation_timestamp": "2025-05-15T19:33:09.000000Z"}, {"uuid": "7ef2995b-2e5d-455d-abed-e216919c2282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44181", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44181\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.\n\ud83d\udccf Published: 2025-05-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-15T14:17:05.006Z\n\ud83d\udd17 References:\n1. https://phpgurukul.com/vehicle-record-system-using-php-and-mysql/\n2. https://github.com/nscerol/Vehicle-Record-Management-System/blob/main/CVE-2025-44181-Vehicle-Record-Management-System-1.0-Stored-Cross-Site-Scripting-Vulnerability.md", "creation_timestamp": "2025-05-15T14:35:28.000000Z"}, {"uuid": "95ad91f3-2721-4bc5-a26a-16073f3f6b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4418", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4418\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An improper validation of integrity check value vulnerability exists in \n\nAVEVA\u00a0PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, \ncould allow a miscreant with elevated privileges to modify PI Connector \nfor CygNet local data files (cache and buffers) in a way that causes the\n connector service to become unresponsive.\n\ud83d\udccf Published: 2025-06-12T19:37:46.740Z\n\ud83d\udccf Modified: 2025-06-12T19:54:54.525Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-09\n2. https://www.aveva.com/en/support-and-success/cyber-security-updates/", "creation_timestamp": "2025-06-12T20:34:23.000000Z"}]}