{"vulnerability": "CVE-2025-6335", "sightings": [{"uuid": "97394726-838f-444d-a7e6-da053e6b80a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "seen", "source": "Telegram/iRuzp0CuSyW9LBw5wJCbHvBDGRyj3e1op05yhSdYb6lHYSQ", "content": "", "creation_timestamp": "2025-12-19T03:00:07.000000Z"}, {"uuid": "4982ba7c-1e32-45c0-8192-d1aef969775a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "published-proof-of-concept", "source": "Telegram/UD4f2fAiHC8hrDsfHLnzkdfzuqQpRp_S5NbwfSwmP7L4Z6U", "content": "", "creation_timestamp": "2026-04-10T03:00:06.000000Z"}, {"uuid": "6603096b-8741-4492-a0d6-d55bd2c8f2de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6335\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php of the component Template Handler. The manipulation of the argument notes leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-20T11:00:19.524Z\n\ud83d\udccf Modified: 2025-06-20T11:00:19.524Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.313331\n2. https://vuldb.com/?ctiid.313331\n3. https://vuldb.com/?submit.596624\n4. https://github.com/jujubooom/CVE/issues/1", "creation_timestamp": "2025-06-20T11:46:58.000000Z"}, {"uuid": "6a323c6d-2f17-4855-9b59-3c7dbbc98421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "seen", "source": "https://t.me/GithubRedTeam/85956", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-63353\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Zvckster\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 11:06:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nMulti-language PoC (Python \u00b7 Go \u00b7 JS \u00b7 C) and technical documentation for CVE-2025-63353, a critical predictable-default-PSK vulnerability in FiberHome HG6145F1 GPON ONT devices. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T11:07:01.000000Z"}, {"uuid": "696cc552-ba49-4ad4-8ed7-98e87ca087d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "seen", "source": "Telegram/RsMUBraRE6ODJwgoXHQZyogHp2QU70bvh1hcrVwAH7ntg88", "content": "", "creation_timestamp": "2026-05-26T03:00:05.000000Z"}, {"uuid": "3bf450b8-7c38-45d9-8edb-8e29bfbf4321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/429", "content": "CVE-2025-63353\n\nA vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.", "creation_timestamp": "2026-08-28T00:00:33.564957Z"}, {"uuid": "92859cfd-c963-4a18-a9d5-7f7ef066f861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63353", "type": "seen", "source": "https://t.me/cve0day/429", "content": "CVE-2025-63353\n\nA vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.", "creation_timestamp": "2026-08-27T15:00:06.933664Z"}]}