{"vulnerability": "CVE-2025-64095", "sightings": [{"uuid": "22c6e788-aff1-4491-9d89-bc1f302f2365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-64095", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4c5etmxnu22", "content": "", "creation_timestamp": "2025-10-29T00:01:30.536450Z"}, {"uuid": "66a8bd83-d7c0-4d6a-a2b1-7614eeb0f674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4c5isapkw2u", "content": "", "creation_timestamp": "2025-10-29T00:03:42.787397Z"}, {"uuid": "de2aed57-0231-4b3a-9a6e-50802660f7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4hmnx7uqo2v", "content": "", "creation_timestamp": "2025-10-31T04:18:20.955122Z"}, {"uuid": "40da5fa6-bfbb-4d90-82e7-dc414d34dc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-64095.yaml", "content": "", "creation_timestamp": "2025-11-02T13:20:05.000000Z"}, {"uuid": "22e5d41b-bf92-4811-80a1-d2b7246b13e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4qw67sa2q2b", "content": "", "creation_timestamp": "2025-11-03T21:02:30.353339Z"}, {"uuid": "8ff7b23d-e852-49e8-865a-b6307e88a992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6ztoy3k3q2b", "content": "", "creation_timestamp": "2025-12-02T21:02:40.271304Z"}, {"uuid": "3abd70b6-0d1f-4660-83dc-a927fee2e21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/144", "content": "CVE-2025-64095", "creation_timestamp": "2025-11-04T19:08:31.000000Z"}, {"uuid": "8b562844-96f6-4be9-9773-26a41a6d8cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/58601", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aproof of concept (PoC) For CVE-2025-64095 DotNetNuke (DNN) \nURL\uff1ahttps://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-06T20:22:44.000000Z"}, {"uuid": "c0a3c3a1-20fa-4602-90ed-6521945187d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "Telegram/zOyN-7-_XMADTOEf0JYDMm0l_Fdv1kfDMnqm4CfCtmOszl4", "content": "", "creation_timestamp": "2025-11-01T21:00:06.000000Z"}, {"uuid": "aafbaec3-7310-4276-b166-ec1db6f69303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/sysadm_in_up/2475", "content": "PoC CVE-2025-64095 - DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem\n\nhttps://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC\n\nP.S. Thx Reaza for the link \ud83e\udd1d", "creation_timestamp": "2026-07-30T00:03:00.418621Z"}, {"uuid": "e2d4b4f9-2cdd-41df-a171-73aee499599c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2475", "content": "PoC CVE-2025-64095 - DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem\n\nhttps://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC\n\nP.S. Thx Reaza for the link \ud83e\udd1d", "creation_timestamp": "2026-08-03T23:00:13.083454Z"}, {"uuid": "2e7b60a7-04e6-464e-ac86-d872f8ffac34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2475", "content": "PoC CVE-2025-64095 - DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem\n\nhttps://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC\n\nP.S. Thx Reaza for the link \ud83e\udd1d", "creation_timestamp": "2026-08-04T00:00:09.890910Z"}, {"uuid": "07a04380-ab82-45c6-a002-aacf1faa61bd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5403545-e76e-4e05-bc06-eae176a792ca", "content": "", "creation_timestamp": "2026-06-23T14:03:57.177997Z"}, {"uuid": "3d7a17a7-7800-4d7e-a268-83e68e64b4e2", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-64095", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b9d2e33-01ab-49b1-b90a-d771f8f121ee", "content": "", "creation_timestamp": "2026-06-30T09:23:34.275847Z"}, {"uuid": "4b7d0e57-1038-45b8-8714-8a63ee87d691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/brutsecurity/2347", "content": "\ud83d\udea8CVE-2025-64095 (CVSS 10.0) : A Critical Flaw in DNN Platform Allows Unauthenticated Website Overwrite\n\n\u26a1Dorks\nHUNTER : http://product.name=\"DotNetNuke\"", "creation_timestamp": "2026-07-09T03:00:06.288536Z"}, {"uuid": "95792b80-7741-40ef-8378-f8f9c320b683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/brutsecurity/2347", "content": "\ud83d\udea8CVE-2025-64095 (CVSS 10.0) : A Critical Flaw in DNN Platform Allows Unauthenticated Website Overwrite\n\n\u26a1Dorks\nHUNTER : http://product.name=\"DotNetNuke\"", "creation_timestamp": "2026-07-10T00:00:13.665661Z"}, {"uuid": "b9a3a757-1d00-412d-b4ad-b7956081746d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/brutsecurity/2347", "content": "\ud83d\udea8CVE-2025-64095 (CVSS 10.0) : A Critical Flaw in DNN Platform Allows Unauthenticated Website Overwrite\n\n\u26a1Dorks\nHUNTER : http://product.name=\"DotNetNuke\"", "creation_timestamp": "2026-07-11T11:00:04.639629Z"}, {"uuid": "8d01e4ab-e2ee-4851-9027-87e88f38fe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/brutsecurity/2347", "content": "\ud83d\udea8CVE-2025-64095 (CVSS 10.0) : A Critical Flaw in DNN Platform Allows Unauthenticated Website Overwrite\n\n\u26a1Dorks\nHUNTER : http://product.name=\"DotNetNuke\"", "creation_timestamp": "2026-07-12T00:00:51.258491Z"}, {"uuid": "d12a411d-5916-470f-840a-5e2ce1a587eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/proxy_bar/2841", "content": "CVE-2025-64095\n*  \nDNN Unauthenticated arbitrary file upload\n\nPOC", "creation_timestamp": "2026-07-20T19:00:09.701060Z"}, {"uuid": "177450d6-b193-4a0c-a033-629305a22c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/proxy_bar/2841", "content": "CVE-2025-64095\n*  \nDNN Unauthenticated arbitrary file upload\n\nPOC", "creation_timestamp": "2026-07-21T00:00:28.506333Z"}, {"uuid": "60f6ca16-d42b-42c5-aea9-9e210ee1bc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2841", "content": "CVE-2025-64095\n*  \nDNN Unauthenticated arbitrary file upload\n\nPOC", "creation_timestamp": "2026-07-22T00:00:25.701111Z"}, {"uuid": "f52ff85b-2087-4cc5-b210-1857ea3bb617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/sysadm_in_up/2475", "content": "PoC CVE-2025-64095 - DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem\n\nhttps://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC\n\nP.S. Thx Reaza for the link \ud83e\udd1d", "creation_timestamp": "2026-07-29T12:03:14.567249Z"}, {"uuid": "9c242677-6ac6-4b54-b131-20da28b118ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "seen", "source": "https://t.me/iranAnonymous_Ko/2888", "content": "CVE-2025-64095\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc (CVSS 10) \u062f\u0631 DNN Platform \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 10.1.1\n\u0645\u0634\u06a9\u0644: \u0622\u067e\u0644\u0648\u062f \u0641\u0627\u06cc\u0644 \u0628\u062f\u0648\u0646 \u0644\u0627\u06af\u06cc\u0646 \u0627\u0632 \u0637\u0631\u06cc\u0642 FileUploader.ashx \u0628\u0627 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f\n\u06a9\u0627\u0631\u0628\u0631\u062f: \u062a\u063a\u06cc\u06cc\u0631 \u0638\u0627\u0647\u0631 \u0633\u0627\u06cc\u062a\u060c \u062a\u0632\u0631\u06cc\u0642 XSS (\u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SVG \u062d\u0627\u0648\u06cc \u06a9\u062f\u0647\u0627\u06cc \u062c\u0627\u0648\u0627\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a)\u060c \u0622\u067e\u0644\u0648\u062f \u0648\u0628\u200c\u0634\u0644 (\u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635)\u060c \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645\u0627\u062a\n\u0646\u06a9\u062a\u0647 SVG: \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SVG \u0628\u0647 \u062f\u0644\u06cc\u0644 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0627\u0632 \u062a\u06af  \u0648 \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc\u06cc \u0645\u062b\u0644 onload\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 payload\u0647\u0627 \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 XSS \u067e\u0627\u06cc\u062f\u0627\u0631 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0646 \u0648 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u062f\u0631 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646 \u06a9\u0647 \u06a9\u0627\u0631 \u0631\u0648 \u0631\u0627\u062d\u062a\u200c\u062a\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0647\n\u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc: \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a POST \u062d\u0627\u0648\u06cc \u0641\u0627\u06cc\u0644 \u0645\u062e\u0631\u0628 (\u0645\u062b\u0644\u0627\u064b SVG \u0628\u0627 \u06a9\u062f XSS) \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\n\nTelegram: @kiraom", "creation_timestamp": "2026-09-09T10:00:05.862219Z"}, {"uuid": "6c6cd42c-a705-46f4-8ad6-2f4bbb9075f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64095", "type": "published-proof-of-concept", "source": "https://t.me/iranAnonymous_Ko/2888", "content": "CVE-2025-64095\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc (CVSS 10) \u062f\u0631 DNN Platform \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 10.1.1\n\u0645\u0634\u06a9\u0644: \u0622\u067e\u0644\u0648\u062f \u0641\u0627\u06cc\u0644 \u0628\u062f\u0648\u0646 \u0644\u0627\u06af\u06cc\u0646 \u0627\u0632 \u0637\u0631\u06cc\u0642 FileUploader.ashx \u0628\u0627 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f\n\u06a9\u0627\u0631\u0628\u0631\u062f: \u062a\u063a\u06cc\u06cc\u0631 \u0638\u0627\u0647\u0631 \u0633\u0627\u06cc\u062a\u060c \u062a\u0632\u0631\u06cc\u0642 XSS (\u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SVG \u062d\u0627\u0648\u06cc \u06a9\u062f\u0647\u0627\u06cc \u062c\u0627\u0648\u0627\u0627\u0633\u06a9\u0631\u06cc\u067e\u062a)\u060c \u0622\u067e\u0644\u0648\u062f \u0648\u0628\u200c\u0634\u0644 (\u062f\u0631 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635)\u060c \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645\u0627\u062a\n\u0646\u06a9\u062a\u0647 SVG: \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc SVG \u0628\u0647 \u062f\u0644\u06cc\u0644 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0627\u0632 \u062a\u06af  \u0648 \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc\u06cc \u0645\u062b\u0644 onload\u060c \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0637\u0631\u0646\u0627\u06a9\u200c\u062a\u0631\u06cc\u0646 payload\u0647\u0627 \u0628\u0631\u0627\u06cc \u062a\u0632\u0631\u06cc\u0642 XSS \u067e\u0627\u06cc\u062f\u0627\u0631 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0646 \u0648 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u062f\u0631 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646 \u06a9\u0647 \u06a9\u0627\u0631 \u0631\u0648 \u0631\u0627\u062d\u062a\u200c\u062a\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0647\n\u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc: \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a POST \u062d\u0627\u0648\u06cc \u0641\u0627\u06cc\u0644 \u0645\u062e\u0631\u0628 (\u0645\u062b\u0644\u0627\u064b SVG \u0628\u0627 \u06a9\u062f XSS) \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\n\nTelegram: @kiraom", "creation_timestamp": "2026-09-10T00:00:45.231996Z"}]}