{"vulnerability": "cve-2025-3195", "sightings": [{"uuid": "a1a6b188-2811-4d6a-87ad-ba8e456cd599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llxnhfeght2x", "content": "", "creation_timestamp": "2025-04-04T05:06:55.485472Z"}, {"uuid": "a0e8eaee-3560-4070-87a0-a89a8e0f97c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31950", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04", "content": "", "creation_timestamp": "2025-04-15T10:00:00.000000Z"}, {"uuid": "84a9bfa4-274a-4249-9b7b-f3718b8ed147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31950", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3gl7i2c", "content": "", "creation_timestamp": "2025-04-15T22:44:16.691166Z"}, {"uuid": "d03a9587-9a37-4a24-a41f-4bd4dec17a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vzqyy5vz2q", "content": "", "creation_timestamp": "2025-11-05T21:49:58.169102Z"}, {"uuid": "7d8925c1-9c46-40df-965a-6da830088579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3195", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3195\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0. This issue affects some unknown processing of the file /bbms.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-04T01:00:09.418Z\n\ud83d\udccf Modified: 2025-04-04T01:00:09.418Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303149\n2. https://vuldb.com/?ctiid.303149\n3. https://vuldb.com/?submit.544147\n4. https://github.com/p1026/CVE/issues/21\n5. https://itsourcecode.com/", "creation_timestamp": "2025-04-04T01:35:38.000000Z"}, {"uuid": "f1f0a1d0-cb2a-45f9-8414-c29b09d2ea52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31950", "type": "seen", "source": "https://t.me/cvedetector/23023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31950 - SmartCharge EV Charger Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-31950 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An unauthenticated attacker can obtain EV charger energy consumption information of other users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:48:54.000000Z"}, {"uuid": "823223b0-860a-4c60-a0f1-2ce6364c4229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3195", "type": "seen", "source": "https://t.me/cvedetector/22066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3195 - iSourcecode Online Blood Bank Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3195 \nPublished : April 4, 2025, 2:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0. This issue affects some unknown processing of the file /bbms.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-04T06:18:09.000000Z"}, {"uuid": "759a6dce-381e-4ae5-bc63-f1d296c7a0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31951", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76y6vzxi2r", "content": "\ud83d\udfe0 CVE-2025-31951 - High (8.8)\n\nHCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-31951/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:10:09.958215Z"}, {"uuid": "a98c6176-e989-4b79-9493-22bea3e9df38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7aelzoe42h", "content": "CVE-2025-31959 - HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.\nCVE ID : CVE-2025-31959\n \n Published : May 6, 2026, 3:16 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : HCL BigFix Service Management (SM) application fails to str...", "creation_timestamp": "2026-05-06T17:35:00.785474Z"}, {"uuid": "8a59244b-24f2-4508-9930-9a0fac22cfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7an7llqp2c", "content": "CVE-2025-31957 - HCL BigFix Service Management (SM) is affected by a Cross\u2011Site Request Forgery (CSRF) vulnerability.\nCVE ID : CVE-2025-31957\n \n Published : May 6, 2026, 3:16 p.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : HHCL BigFix Service Management (SM) is affected by a Cro...", "creation_timestamp": "2026-05-06T17:39:47.309025Z"}, {"uuid": "5ba25c0e-a923-4b25-8c76-1230c0dca4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31951", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:14.465880Z"}]}