{"vulnerability": "cve-2025-3429", "sightings": [{"uuid": "30fc74f3-0458-42bb-b1b8-be5436d70303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6prtavf5t2l", "content": "", "creation_timestamp": "2025-11-28T21:02:30.370800Z"}, {"uuid": "805de9dc-e012-4729-ab65-7900f52b6c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m6nbebqpsb2b", "content": "", "creation_timestamp": "2025-11-27T21:02:30.519669Z"}, {"uuid": "5f32c733-b3ed-49f5-aa20-469cffbee385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115604893782494961", "content": "", "creation_timestamp": "2025-11-24T13:24:50.107675Z"}, {"uuid": "4353116b-17d1-420a-8049-4d8c3f7af208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m6ewjslyik2x", "content": "", "creation_timestamp": "2025-11-24T13:27:26.795086Z"}, {"uuid": "216953c8-36c2-470c-b413-e241de94fba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3m6ewjvonps2x", "content": "", "creation_timestamp": "2025-11-24T13:27:27.802776Z"}, {"uuid": "940b51cf-983e-4891-8adb-736b78636dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m54emabh2r2i", "content": "", "creation_timestamp": "2025-11-08T10:20:07.732491Z"}, {"uuid": "dfdda23a-34ca-4ec2-8d14-9361117a74bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5z7feeuqs2t", "content": "", "creation_timestamp": "2025-11-19T21:34:01.158031Z"}, {"uuid": "97a64c4e-29e3-4ed4-87dd-6657630fbb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3m54jv2qwrl2k", "content": "", "creation_timestamp": "2025-11-08T11:54:32.558008Z"}, {"uuid": "e6b2a190-cb5e-4943-82ad-9c20b9d2137b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m6is46cloo2y", "content": "", "creation_timestamp": "2025-11-26T02:18:50.017724Z"}, {"uuid": "11cbadda-ad73-4272-964e-38972795d0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m5indphbkg25", "content": "", "creation_timestamp": "2025-11-13T07:28:21.973492Z"}, {"uuid": "4805b588-1576-4071-a6cc-0b04a218ea6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m6bpeujxwc2r", "content": "", "creation_timestamp": "2025-11-23T06:41:21.904438Z"}, {"uuid": "8efd8304-1bcb-4ff7-8189-957209f998b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4bkex26th2x", "content": "", "creation_timestamp": "2025-10-28T18:21:32.488959Z"}, {"uuid": "eb02540c-1bcc-4459-ba9a-2cf5debdfc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m5d32wfgbz2n", "content": "", "creation_timestamp": "2025-11-11T02:18:01.410710Z"}, {"uuid": "35a62768-3f34-4161-9a95-069308250fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m5dalcjc6s25", "content": "", "creation_timestamp": "2025-11-11T03:56:39.823825Z"}, {"uuid": "8e38b767-3f4c-4e22-9e23-b19e031107f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115508510366082271", "content": "", "creation_timestamp": "2025-11-07T12:53:14.940600Z"}, {"uuid": "1b754539-40f6-4248-94ce-5aa956cd39a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115508512645027544", "content": "", "creation_timestamp": "2025-11-07T12:53:49.709655Z"}, {"uuid": "9a76c6fc-a633-49af-8584-5e0a51a57336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m524qachze27", "content": "", "creation_timestamp": "2025-11-07T12:53:52.526994Z"}, {"uuid": "5b306354-ff44-47fd-ba91-340e66b92d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3m5267x5ucn26", "content": "", "creation_timestamp": "2025-11-07T13:20:33.694713Z"}, {"uuid": "d24c4896-c5d5-441f-a526-2c477dabaaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115508644737560967", "content": "", "creation_timestamp": "2025-11-07T13:27:25.435541Z"}, {"uuid": "5ac6db89-bd01-4392-9496-d60457bdd864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m6gbmrtayq2y", "content": "", "creation_timestamp": "2025-11-25T02:18:34.226966Z"}, {"uuid": "c2bef4a9-9b22-47da-8f87-3363dc863635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m527ihb56w2e", "content": "", "creation_timestamp": "2025-11-07T13:43:12.834995Z"}, {"uuid": "c7346b55-0d35-4dd5-9e07-8833a7c58b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://www.acn.gov.it/portale/w/monsta-ftp-poc-pubblico-per-lo-sfruttamento-della-cve-2025-34299", "content": "", "creation_timestamp": "2025-11-07T10:26:45.000000Z"}, {"uuid": "f76e4a86-24ac-48ba-a6df-813b808d8f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m52axkdrxe2s", "content": "", "creation_timestamp": "2025-11-07T14:09:32.643794Z"}, {"uuid": "4caeddfc-082c-4bec-ae14-24f76d5e0a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m52dxp6df32k", "content": "", "creation_timestamp": "2025-11-07T15:03:19.723920Z"}, {"uuid": "ebbcb754-5fd8-4fb8-af62-fd554e5fb31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://mastodon.social/users/leakix/statuses/115509021891385463", "content": "", "creation_timestamp": "2025-11-07T15:03:21.631230Z"}, {"uuid": "ac0e4b67-d1f8-4127-9230-6ffb889718c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52enp73tcf2", "content": "", "creation_timestamp": "2025-11-07T15:15:45.156744Z"}, {"uuid": "54944044-254b-4d2f-b8a9-e34549f43c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m52fndelpl2j", "content": "", "creation_timestamp": "2025-11-07T15:33:18.548298Z"}, {"uuid": "8ddddcd2-bfa0-4e61-8696-b8ee67f3a174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115509496875503886", "content": "", "creation_timestamp": "2025-11-07T17:04:08.113960Z"}, {"uuid": "c06a9dc0-efe6-4b32-8f6b-34df7a70df6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52mr2ofaka2", "content": "", "creation_timestamp": "2025-11-07T17:41:14.226533Z"}, {"uuid": "24d83420-f28c-4ac2-9c68-f9a7b97ed589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3xvmcfdyd2o", "content": "", "creation_timestamp": "2025-10-24T22:15:53.149435Z"}, {"uuid": "5188a8ca-f7b4-439f-8db8-eb8b443a748a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3m52usjutkc2n", "content": "", "creation_timestamp": "2025-11-07T20:04:41.571687Z"}, {"uuid": "61e4d63e-61c9-431d-abc3-777138d5b6ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m46rrgqt6i27", "content": "", "creation_timestamp": "2025-10-27T15:55:48.625470Z"}, {"uuid": "77eff838-507d-4b67-9b29-3286f849abb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-3f4e7d7c-867ac0d13e9371e2", "content": "", "creation_timestamp": "2025-11-14T18:46:33.667316Z"}, {"uuid": "fa06802f-9766-4aee-b710-771ba2214264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m6he5trqg22o", "content": "", "creation_timestamp": "2025-11-25T12:36:38.652517Z"}, {"uuid": "086125e0-f935-4282-ac02-4e03ebd69937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m5es4cgmuj2i", "content": "", "creation_timestamp": "2025-11-11T18:43:03.884966Z"}, {"uuid": "035d3af7-184d-46dc-b1b0-b6f54512fe5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m6he5vk72k2o", "content": "", "creation_timestamp": "2025-11-25T12:36:40.064681Z"}, {"uuid": "fb3ae192-71c1-4094-b65e-0ad6cbf5954e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m6he5vkbyc2o", "content": "", "creation_timestamp": "2025-11-25T12:36:41.977605Z"}, {"uuid": "b3518c95-aff7-4b57-890c-4ad862c1824a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/hackread.bsky.social/post/3m5bhpemslc2h", "content": "", "creation_timestamp": "2025-11-10T10:58:53.880655Z"}, {"uuid": "9f8733ec-d02e-4227-af7c-268896c25707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m6xuy7glpb27", "content": "", "creation_timestamp": "2025-12-02T02:20:14.142427Z"}, {"uuid": "8fa53ff2-f02a-4516-9f7d-1791a1f14ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m6x44wnquw2b", "content": "", "creation_timestamp": "2025-12-01T18:55:28.636009Z"}, {"uuid": "6977a85f-6965-4e3e-aea4-5010715368e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3m5bqk7m3f523", "content": "", "creation_timestamp": "2025-11-10T13:37:03.518681Z"}, {"uuid": "4cb92c36-704b-4c48-bc18-f2f17e9b3990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34299", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115662595400862915", "content": "", "creation_timestamp": "2025-12-04T17:59:06.070095Z"}, {"uuid": "efb63093-8e87-420b-9140-f67656dc2675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m76lvyc7zyv2", "content": "", "creation_timestamp": "2025-12-04T18:27:11.033436Z"}, {"uuid": "445c7237-ab1b-40eb-a88b-05cffc9c1de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34291", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115669352580293240", "content": "", "creation_timestamp": "2025-12-05T22:37:32.579335Z"}, {"uuid": "d1434157-edd4-4fd2-b752-36dd718576b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7blfxhfwd2n", "content": "", "creation_timestamp": "2025-12-05T22:55:35.013946Z"}, {"uuid": "f22e2a04-54c8-47c9-a111-9ae50508539d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/115673292044950996", "content": "", "creation_timestamp": "2025-12-06T15:19:26.913700Z"}, {"uuid": "8deaa40b-7410-49e8-8ad1-2487cd0e71b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7j3d7jucc2j", "content": "", "creation_timestamp": "2025-12-08T22:29:03.677700Z"}, {"uuid": "b3f47ae7-31fc-40d8-93c5-b20493b40380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34299.yaml", "content": "", "creation_timestamp": "2025-12-11T05:29:32.000000Z"}, {"uuid": "3c8ef5eb-9b0b-431a-ae75-acb8635b0db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7sye2qlpt2b", "content": "", "creation_timestamp": "2025-12-12T21:02:27.696336Z"}, {"uuid": "b9aea9d0-b053-4990-8fac-48d355199449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mah4lzmnph2y", "content": "", "creation_timestamp": "2025-12-20T21:11:42.713472Z"}, {"uuid": "6f5e0619-7ec0-47b4-b521-8ad5bbeae6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34290", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115754987585627132", "content": "", "creation_timestamp": "2025-12-21T01:35:40.437287Z"}, {"uuid": "3d55ae03-d21f-4963-82d5-8b163ac835a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34290", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mahldzzrxk2a", "content": "", "creation_timestamp": "2025-12-21T01:35:43.529035Z"}, {"uuid": "e10b2b27-02bb-43cc-be86-2f824cfc2897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34290", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115756633259817011", "content": "", "creation_timestamp": "2025-12-21T08:34:10.012362Z"}, {"uuid": "d5d31da3-0541-4af4-b63b-b85e64546222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34291.yaml", "content": "", "creation_timestamp": "2026-01-03T23:47:09.000000Z"}, {"uuid": "2afad3ec-f36b-4157-ae25-5276a70999bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mbmt47y3pf22", "content": "", "creation_timestamp": "2026-01-04T21:02:59.752909Z"}, {"uuid": "724d477a-7424-4e39-a92f-c20e337fb7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34297", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhg27yxjts2u", "content": "", "creation_timestamp": "2026-03-19T12:52:55.478901Z"}, {"uuid": "b43121c9-a105-4b6c-b34a-77bcb263d262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34297", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhg4t33bxc2u", "content": "", "creation_timestamp": "2026-03-19T13:39:22.519704Z"}, {"uuid": "e4de7598-7cb2-44d6-82c4-8e11516c2bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34297", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhg6rcueuk2u", "content": "", "creation_timestamp": "2026-03-19T14:14:11.051985Z"}, {"uuid": "f6415ec2-5f41-4678-86ea-1c8233677120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mcvmgvst5r2c", "content": "", "creation_timestamp": "2026-01-21T02:22:50.475172Z"}, {"uuid": "b2a2087a-9f47-49a8-8e2c-53f11370d5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mddihlgsfk2s", "content": "", "creation_timestamp": "2026-01-26T14:48:56.835493Z"}, {"uuid": "5c4324c0-f788-4099-a4ae-da3ebd0a5da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdgnthprbx2j", "content": "", "creation_timestamp": "2026-01-27T21:03:05.049555Z"}, {"uuid": "2dbee0d7-92c5-4ba4-b2f3-706767ba0f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "Telegram/17qqZOikrNpW0MjzZOaR1ib-S-9-y3AFNN436_OHVf8p3hI", "content": "", "creation_timestamp": "2025-12-11T09:00:06.000000Z"}, {"uuid": "03a46425-8a7d-4598-8111-5b32fc290af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://t.me/DarkWebInformer_News/11104", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer\nTitle: Alleged Leak of Unauthorized Monsta FTP Access; CVE-2025-34299\nLink: https://darkwebinformer.com/alleged-leak-of-unauthorized-monsta-ftp-access-cve-2025-34299/", "creation_timestamp": "2025-12-04T17:59:21.000000Z"}, {"uuid": "384d53fe-2b98-4a40-84bd-6cda7f153dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59589", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-34299\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-34299\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-13T17:02:36.000000Z"}, {"uuid": "65a7e2aa-0ead-4d29-b9ed-8a840995fed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "Telegram/lbg3qz8wK-Srr-k6BvW0hDYmtpTKwvGGzCPXHWNgNmGS9PQ", "content": "", "creation_timestamp": "2025-11-11T15:00:08.000000Z"}, {"uuid": "028c5551-b67a-48d9-8064-0c697ee46ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "Telegram/WcPZObbSHLBFmRYFl6TdPS621eRN9of9-5no-d4PUU80svU", "content": "", "creation_timestamp": "2025-11-19T03:00:08.000000Z"}, {"uuid": "5fcacd8d-1766-4e29-b9cb-4eaab31f48b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "Telegram/Q-s80O6b5uVlmhryR8-ZciI2tLabDBtdKOXSX3QDtGfzYSw", "content": "", "creation_timestamp": "2025-11-13T21:00:05.000000Z"}, {"uuid": "3c75c3b5-c675-4231-b838-6b933347011c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "Telegram/Qmi1vJBSfhmNc6ju3o-GAfvFlN7hM0-MPh6zw4iAzfQMLCw", "content": "", "creation_timestamp": "2025-11-10T15:00:09.000000Z"}, {"uuid": "3af18b8d-e612-40a9-8986-52cd55991834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10339", "content": "What\u2019s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299)\n\nhttps://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/", "creation_timestamp": "2025-11-08T11:03:43.000000Z"}, {"uuid": "61b28cd1-daed-4721-b23c-41ab588254a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59239", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDetection for CVE-2025-34299\nURL\uff1ahttps://github.com/rxerium/CVE-2025-34299\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-11T10:09:34.000000Z"}, {"uuid": "8eecbe21-e2b9-4001-b7a2-4e69acb58c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3429", "type": "seen", "source": "https://t.me/cvedetector/22433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3429 - WordPress 3DPrint Lite SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-3429 \nPublished : April 8, 2025, 7:15 a.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T11:29:22.000000Z"}, {"uuid": "ddbd18a1-7083-47f3-a296-e7720f66d1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5492", "content": "What\u2019s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) #MonstaFTP #RemoteCodeExecution #ZeroDay #CVE202534299 #VulnerabilityDiscovery https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/", "creation_timestamp": "2026-08-01T23:00:04.895924Z"}, {"uuid": "f7aca27d-fc68-4460-958e-3d73c0d44386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "published-proof-of-concept", "source": "Telegram/p6_7Fzr7AE5-s9SdgqzAFTlpxGf9IMuh2DhHzRrKndjq5KI", "content": "", "creation_timestamp": "2026-05-18T21:00:03.000000Z"}, {"uuid": "a283f098-5f60-4e5e-984d-5edb50d201d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6547502", "content": "2026-05-21: [CVE-2025-34291] Langflow Origin Validation Error VulnerabilityLangflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as SameSite=None allows a malicious webpage to perform cross-origin requests that include credentials and successfully call the refresh endpoint. This could allow the attacker to execute arbitrary code and achieve full system compromise via obtained tokens that permit access to authenticated endpoints.\ncisakev", "creation_timestamp": "2026-05-21T19:22:23.274443Z"}, {"uuid": "98f3730d-90b0-4c20-a9a3-cb1e847ae4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmf5sd5pa32s", "content": "\ud83d\uded1 CVE-2025-34291\nLangflow Langflow\nCVSS 9.4 / EPSS 9% / KEV\nTL;DR: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enabl\u2026\nhttps://cvesentinel.replit.app/report/CVE-2025-34291?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-21T19:30:07.691473Z"}, {"uuid": "d498b8af-77c2-46bd-90e3-8adc907b7832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\n\nThe vulnerabilities in question are listed below -\n\n\n  CVE-2025-34291 (CVSS score: 9.4) - An origin validation error vulnerability in Langflow that could", "creation_timestamp": "2026-05-22T03:47:33.000000Z"}, {"uuid": "d69196cb-4289-4f8f-a016-2a3112892af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "Telegram/pgeIv_xa8AzQaCo8hqS5hlx8pfGv-ldT0nDTSWu_i-eUGA", "content": "", "creation_timestamp": "2026-05-22T07:29:55.000000Z"}, {"uuid": "2798f7ec-ecfb-4a1c-b373-d09cdd774fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://www.acn.gov.it/portale/w/langflow-rilevato-sfruttamento-della-cve-2025-34291", "content": "", "creation_timestamp": "2026-05-22T06:10:44.000000Z"}, {"uuid": "0f86bb4e-c9ea-416a-99db-e9467e6f2e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mmhbv4rldr2q", "content": "CVE-2025-34291 & CVE-2026-34926: Critical Langflow RCE and Trend Micro Apex O...\n\nCISA adds two critical vulnerabilities to KEV catalog: CVE-2025-34291 (Langflow CORS misconfiguration enabling accou...\n\n\ud83d\udd17 https://ipsec.live/blog/2026-05-22-langflow-apex-one-cisa-kev\n\n#infosec #cybersecurity", "creation_timestamp": "2026-05-22T15:48:35.916605Z"}, {"uuid": "4b287d72-56f4-4e2d-9f91-6461ddca020b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3de6464b-7f59-4e0e-a407-d5f8c516ea1e", "content": "", "creation_timestamp": "2026-05-22T17:00:02.446253Z"}, {"uuid": "cf5672c8-ba74-42f6-b944-7f368a061845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116619809226441932", "content": "\ud83d\udcf0 CISA KEV Catalog Updated: Actively Exploited Langflow and Trend Micro Flaws Demand Urgent Patching\n\ud83d\udce2 CISA KEV UPDATE: Two new vulnerabilities affecting Langflow (CVE-2025-34291) & Trend Micro Apex One (CVE-2026-34926) are being actively exploited. Federal agencies mandated to patch. All orgs urged to patch NOW! #CyberSecurity #Vulnerability #Patc...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-langflow-and-trend-micro-bugs-to-kev-catal\u2026", "creation_timestamp": "2026-05-22T19:11:13.795713Z"}, {"uuid": "bd7ac6e1-280e-43da-9210-32cd5cd3c611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mmhnazrwsk2x", "content": "\ud83d\udce2 CISA KEV UPDATE: Two new vulnerabilities affecting Langflow (CVE-2025-34291) & Trend Micro Apex One (CVE-2026-34926) are being actively exploited. Federal agencies mandated to patch. All orgs urged to patch NOW! #CyberSecurity #Vulnerability #Patc...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-05-22T19:12:07.695830Z"}, {"uuid": "b62eb160-1e8c-4c38-b3a2-0284c5bd03b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmiontm2ao2p", "content": "Every Langflow install on version 1.6.9 or older is being targeted by Iran's MuddyWater APT. CISA added CVE-2025-34291 to its KEV catalog May 21. The flaw chains permissive CORS with a CSRF gap on a code-execution endpoint, enabling account takeover and RCE. Federal patch deadline: June 4.", "creation_timestamp": "2026-05-23T05:09:50.953927Z"}, {"uuid": "86951268-c6e7-441d-b7f3-0a231a9bd76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://t.me/thehackernews/9060", "content": "\ud83d\udea8 CISA just added two actively exploited vulns to its KEV catalog.\n\nhttps://thehackernews.com/2026/05/cisa-adds-exploited-langflow-and-trend.html\n\nCritical RCE in Langflow (CVE-2025-34291, CVSS 9.4) and directory traversal in Trend Micro Apex One (on-prem).\n\nPatch now if you're using either.", "creation_timestamp": "2026-05-22T07:12:29.000000Z"}, {"uuid": "e1b0b175-7d3f-4e76-a7db-53bda259e0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mmlqd6ylh72w", "content": "CVE watch: CVE-2025-34291: Langflow Langflow \u2014 Langflow Origin Validation Error\u2026\n\nCheck exposure, dependency, and agent/tool access before panic-patching. Inventory beats vibes.\n\nSource: cisa.gov\nhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-34291", "creation_timestamp": "2026-05-24T10:17:39.576708Z"}, {"uuid": "330a3cfd-d9f2-4232-b64d-8d56b1adc2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mmmjhc252h2g", "content": "CISA Adds Critical Langflow Vulnerability (CVE-2025-34291) to KEV Catalog Following Active Exploitation", "creation_timestamp": "2026-05-24T17:47:20.782784Z"}, {"uuid": "f91e0652-264c-4f27-8843-1be09ab90d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "Telegram/hQ1BgqlandqZtiBEN_8bc-Jqb7FATWW_NqNwwco7cLj54NM", "content": "", "creation_timestamp": "2026-05-23T03:00:04.000000Z"}, {"uuid": "03f3d285-4bc5-4c07-9b61-b0ed552af415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmpbklfn5o2x", "content": "CISA has added two vulnerabilities to its KEV catalog: CVE-2025-34291 (CVSS 9.4) in Langflow, allowing arbitrary code execution and full system compromise, and CVE-2026-34926 (CVSS 6.7) in Trend Micro Apex One, enabling local attackers to inject malicious code.", "creation_timestamp": "2026-05-25T20:04:00.680294Z"}, {"uuid": "344c40e6-3340-4263-85c2-67ffb7a2a27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrvjmqiyx2u", "content": "\ud83d\uded1 CVE-2025-34291\n\nCVSS 9.4 / EPSS 30% / KEV\nTL;DR: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and\u2026\nhttps://cvesentinel.com/report/CVE-2025-34291?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-26T21:06:42.429327Z"}, {"uuid": "b45edffc-5cee-4e6b-bc2f-acf2708c6fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrvjyxdaj2s", "content": "\ud83d\uded1 CVE-2025-34291\n\nCVSS 9.4 / EPSS 30% / KEV\nTL;DR: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and\u2026\nhttps://cvesentinel.com/report/CVE-2025-34291?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-05-26T21:06:55.103383Z"}, {"uuid": "ffd70802-5271-4eec-a691-f316dfaee622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://t.me/CyberDispatch/1689", "content": "CISA just added two actively exploited vulns to its KEV catalog.\n\nCritical RCE in Langflow (CVE-2025-34291, CVSS 9.4) and directory traversal in Trend Micro Apex One (on-prem).", "creation_timestamp": "2026-08-29T20:00:14.944736Z"}, {"uuid": "f26fb23b-5bf4-45d3-8580-649adbfb630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mt2k5m4fbk2j", "content": "CVE-2025-34291 is trending. Hype score 4, currently #4 on cvemon.\n\nLangflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-34291", "creation_timestamp": "2026-08-14T16:08:33.680192Z"}, {"uuid": "7c72e5a1-77a0-4742-8314-9f317cbf0a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mocwrua7pv2k", "content": "Any unpatched Langflow instance is being scanned by Iranian APT MuddyWater right now. CVE-2025-34291 (CVSS 9.4) gives full code execution and exposes every API key in the workspace, cascading into connected cloud services. CISA has set the federal patch deadline at June 4.", "creation_timestamp": "2026-06-15T09:09:39.558952Z"}, {"uuid": "630f42fe-fc7f-4758-9803-b0488b66c216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moln2wcggs2q", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date May 21, 2026\n\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability", "creation_timestamp": "2026-06-18T20:09:44.710155Z"}, {"uuid": "6917a964-ab63-4eea-befe-478f4b6a591c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d65f95ac-904d-4d6e-a76f-56217a49e605", "content": "", "creation_timestamp": "2026-06-19T12:45:11.860599Z"}, {"uuid": "da6bb368-fa5b-4810-971b-694d10451847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopx5wsnxk2s", "content": "\u7c73\u5f53\u5c40\u3001\u300cLangflow\u300d\u3084\u300cApex One\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30ed\u30fc\u30b3\u30fc\u30c9\u958b\u767a\u30c4\u30fc\u30eb\u3084\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u88fd\u54c1\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670821\u65e5\u3001\u300cCVE-2025-34291\u300d\u300cCVE-2026-34926\u300d\u306e\u8106\u5f31\u6027\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2025-34291\u300d\u306f\u3001\u30ed\u30fc\u30b3\u30fc\u30c9\u958b\u767a\u30c4\u30fc\u30eb\u300cLangflow\u300d\u306b\u5224\u660e\u3057\u305f\u30aa\u30ea\u30b8\u30f3\u691c\u8a3c\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u30022025\u5e7412\u6708\u306b\u5831\u544a\u3055\u308c\u305f\u3002\n\n\u30c9\u30e1\u30a4\u30f3\u3092\u307e\u305f\u304c\u308b\u901a\u4fe1\u5148\u306e...", "creation_timestamp": "2026-06-20T13:21:03.882810Z"}, {"uuid": "dc7cc3df-c3b3-48ce-b0c3-48379ef9503a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopy4r7tvk2s", "content": "CISA\u304cLangflow\u3068Trend Micro Apex One\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u3092KEV\u306b\u8ffd\u52a0\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u6728\u66dc\u65e5\u3001 Langflow\u3068Trend Micro Apex One\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b2\u3064\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8a3c\u62e0\u304c\u3042\u308b\u3068\u3057\u3066\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u554f\u984c\u3068\u306a\u3063\u3066\u3044\u308b\u8106\u5f31\u6027\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2025-34291\uff08CVSS\u30b9\u30b3\u30a2\uff1a9.4\uff09 - Langflow\u306b\u304a\u3051\u308b\u30aa\u30ea\u30b8\u30f3\u691c\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u3001\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u3092\u4fb5\u5bb3\u3059...", "creation_timestamp": "2026-06-20T13:38:21.090342Z"}, {"uuid": "abee3a87-4729-4ef0-a073-2d7f873d7abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopyvoxdrs2s", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306b\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u306eApex One\u3068Langflow\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001Windows Shell\u3068ConnectWise ScreenConnect\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2025-34291  Langflow Origin\u691c\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-34926  Trend Micro Apex...", "creation_timestamp": "2026-06-20T13:52:16.505924Z"}, {"uuid": "ca6e00ae-b73d-4bd8-8965-6f79922a93c3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/455f8729-4848-40c3-afd3-785bc8bcbbe8", "content": "", "creation_timestamp": "2026-06-23T14:03:37.781328Z"}, {"uuid": "fa01b3d5-a95f-476f-8d9f-c83418b463ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-34291", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mpx2rukqus2u", "content": "Agentic AI Ransomware Operations via Langflow JADEPUFFER\n\nhttps://techjacksolutions.com/scc-intel/langflow-cors-origin-validation-error-enables-rce-and-full-system-compromise-cve-2025-34291\nhttps://flagthis.com/tldr/4914\n\n##Langflow ##JADEPUFFER ##Ransomware ##AgenticAI ##Sysdig", "creation_timestamp": "2026-07-06T02:39:41.292569Z"}, {"uuid": "375dcfe7-2205-408c-b4b9-bb54d7a44c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqouhtdeo62h", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2025-34291: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote cod\u2026\nCVSS 8.8 \u00b7 EPSS 78.9% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2025-34291\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-15T13:50:35.853445Z"}, {"uuid": "b67e164c-c9fa-41cd-a0f7-84cb0c3d032d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://t.me/reverseame/5492", "content": "What\u2019s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) #MonstaFTP #RemoteCodeExecution #ZeroDay #CVE202534299 #VulnerabilityDiscovery https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/", "creation_timestamp": "2026-07-29T12:02:00.201647Z"}, {"uuid": "b9dc64e9-99a4-4d25-9cc7-49897ae1c207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "exploited", "source": "https://t.me/CyberDispatch/1689", "content": "CISA just added two actively exploited vulns to its KEV catalog.\n\nCritical RCE in Langflow (CVE-2025-34291, CVSS 9.4) and directory traversal in Trend Micro Apex One (on-prem).", "creation_timestamp": "2026-08-31T00:00:38.043866Z"}, {"uuid": "3b9b4c33-b280-4b15-8594-1d1943b30240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/monsta_ftp_downloadfile_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"watchTowr Labs\", \"Valentin Lobstein \", \"msutovsky-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a pre-authenticated remote code execution vulnerability\\n          in Monsta FTP versions < 2.11.3. The vulnerability exists in the downloadFile\\n          action which allows an attacker to connect to a malicious FTP or SFTP server\\n          and download arbitrary files to arbitrary locations on the Monsta FTP server.\\n          This module uses FTP to exploit the vulnerability.\", \"disclosure_date\": \"2025-11-07\", \"fullname\": \"exploit/multi/http/monsta_ftp_downloadfile_rce\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Monsta FTP downloadFile Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/monsta_ftp_downloadfile_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/monsta_ftp_downloadfile_rce\", \"references\": [\"CVE-2025-34299\", \"URL-https://labs.watchtowr.com/monsta-ftp-remote-code-execution-cve-2025-34299/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:03.309620Z"}, {"uuid": "ffb1e8a3-c37b-46f1-b294-edfed2a317e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2206", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nMonsta FTP Remote Code Execution Vulnerability (CVE-2025-34299)\n\n\u2014\n\nSummary:\nCritical flaw in Monsta FTP (CVE-2025-34299) allows remote code execution without authentication, putting thousands of servers at risk.\nThe post Monsta FTP Remote Code Execution Vulnerability (CVE-2025-34299)\u00a0 appeared first on eSecurity Planet.\n\n\u2014\n\nSource: eSecurity Planet\nPublished: 2025-11-11 17:28 | Author: Ken Underhill\n\n#vulnerabilities__exploits #monsta #remote\n\nhttps://www.esecurityplanet.com/threats/monsta-ftp-remote-code-execution-vulnerability-cve-2025-34299/", "creation_timestamp": "2026-09-09T05:00:13.654449Z"}, {"uuid": "6463adf3-6b3a-4e43-a18e-73a24d83ba91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2030", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Monsta FTP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\n\u2014\n\nSummary:\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Monsta FTP - \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-34299, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 2.11.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 06:20 | Author: Vulner Queen\n\n#monsta #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-veb-kliente-monsta-ftp-aktivno-ekspluatiruetsya-zloumyshlennikami_16133", "creation_timestamp": "2026-09-09T05:00:13.904877Z"}, {"uuid": "43fa0b4d-ddf7-4090-9abb-51082dd30ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1887", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nWhat\u2019s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299)\n\n\u2014\n\nSummary:\nHappy Friday, friends and.. others.\n\nWe\u2019re glad/sorry to hear that your week has been good/bad, and it\u2019s the weekend/but at least it\u2019s almost the weekend!\n\n\nWhat\u2019re We Doing Today, Mr Fox?\n\nToday, in a tale that seems all too familar at this point, we begun as innocently as always - to reproduce an N-day in Monsta FTP as part of our emerging threat rapid reaction process we enact across the watchTowr client base.\n\nYet, somehow, we find ourselves saddled with the reality of discussing another zer\n\n\u2014\n\nSource: 0day Fans\nPublished: 2025-11-07 11:00 | Author: Sonny\n\n#whats #that #vulnerabilities__exploits\n\nhttps://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/", "creation_timestamp": "2026-09-09T05:00:15.801339Z"}, {"uuid": "8c67da9f-2684-4274-ad1f-b563531e18e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/1887", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nWhat\u2019s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299)\n\n\u2014\n\nSummary:\nHappy Friday, friends and.. others.\n\nWe\u2019re glad/sorry to hear that your week has been good/bad, and it\u2019s the weekend/but at least it\u2019s almost the weekend!\n\n\nWhat\u2019re We Doing Today, Mr Fox?\n\nToday, in a tale that seems all too familar at this point, we begun as innocently as always - to reproduce an N-day in Monsta FTP as part of our emerging threat rapid reaction process we enact across the watchTowr client base.\n\nYet, somehow, we find ourselves saddled with the reality of discussing another zer\n\n\u2014\n\nSource: 0day Fans\nPublished: 2025-11-07 11:00 | Author: Sonny\n\n#whats #that #vulnerabilities__exploits\n\nhttps://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/", "creation_timestamp": "2026-09-10T00:00:35.756748Z"}, {"uuid": "3fa71ab7-90e6-4193-a5b8-66dc4dd2e402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2030", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Monsta FTP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\n\u2014\n\nSummary:\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Monsta FTP - \u0432\u0435\u0431-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-34299, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 2.11.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 06:20 | Author: Vulner Queen\n\n#monsta #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-veb-kliente-monsta-ftp-aktivno-ekspluatiruetsya-zloumyshlennikami_16133", "creation_timestamp": "2026-09-10T00:00:36.582423Z"}, {"uuid": "824d8fc4-3872-47a2-b030-f93e4588980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34299", "type": "published-proof-of-concept", "source": "https://t.me/Intel_Encyclopedia/2206", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nMonsta FTP Remote Code Execution Vulnerability (CVE-2025-34299)\n\n\u2014\n\nSummary:\nCritical flaw in Monsta FTP (CVE-2025-34299) allows remote code execution without authentication, putting thousands of servers at risk.\nThe post Monsta FTP Remote Code Execution Vulnerability (CVE-2025-34299)\u00a0 appeared first on eSecurity Planet.\n\n\u2014\n\nSource: eSecurity Planet\nPublished: 2025-11-11 17:28 | Author: Ken Underhill\n\n#vulnerabilities__exploits #monsta #remote\n\nhttps://www.esecurityplanet.com/threats/monsta-ftp-remote-code-execution-vulnerability-cve-2025-34299/", "creation_timestamp": "2026-09-10T00:00:36.938453Z"}, {"uuid": "a70a4268-324d-4b20-989f-68a0348b977e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "seen", "source": "https://t.me/VulnerabilityNews/42606", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/21/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T05:00:06.510466Z"}, {"uuid": "4fa9db9f-1725-4672-a42f-b436508569ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34291", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42606", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-34291 Langflow Origin Validation Error Vulnerability\nCVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/21/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:45.616011Z"}]}