{"vulnerability": "cve-2025-4786", "sightings": [{"uuid": "7f0c4970-9dd0-4814-bc40-d92df49e936e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47867", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-297/", "content": "", "creation_timestamp": "2025-05-21T03:00:00.000000Z"}, {"uuid": "e4802d73-f9c1-46f3-af29-bb5dfb448b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47866", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-296/", "content": "", "creation_timestamp": "2025-05-21T03:00:00.000000Z"}, {"uuid": "a0bd36a3-15aa-4c1b-bc17-399e3e50fa3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47865", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-295/", "content": "", "creation_timestamp": "2025-05-21T03:00:00.000000Z"}, {"uuid": "2bd56db5-91fe-4805-88df-2f9faf861969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47865", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114547808155134571", "content": "", "creation_timestamp": "2025-05-21T20:54:03.228992Z"}, {"uuid": "1db1f7b0-2890-40c6-b11f-51c5c9074716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47869", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrm4l3clsz2y", "content": "", "creation_timestamp": "2025-06-14T23:36:35.091387Z"}, {"uuid": "fa315804-76df-4f2c-8e62-4e46854c11a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47868", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lrm4u2m6sb2a", "content": "", "creation_timestamp": "2025-06-14T23:41:36.340164Z"}, {"uuid": "8370d097-722a-462c-9a94-be4b6f6d6df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47869", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/250", "content": "", "creation_timestamp": "2025-06-14T21:29:09.000000Z"}, {"uuid": "46ebcdf3-3dcc-4637-8a3b-7d04dc52ca4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47868", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/249", "content": "", "creation_timestamp": "2025-06-14T21:26:17.000000Z"}, {"uuid": "d451ca92-20a2-4324-af45-a53a9d51754f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvaysfr32l", "content": "", "creation_timestamp": "2025-05-13T06:47:22.135180Z"}, {"uuid": "0a4a1684-c8ec-43fc-aa0b-c9d038cd9992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazco7n2h", "content": "", "creation_timestamp": "2025-05-13T06:47:23.710615Z"}, {"uuid": "44132175-3ed3-4210-8acc-a8ddb8eb14a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47864", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazjdv62p", "content": "", "creation_timestamp": "2025-05-13T06:47:24.755552Z"}, {"uuid": "6bdc6913-10d1-429d-86d7-4a789c79207c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazpug62w", "content": "", "creation_timestamp": "2025-05-13T06:47:25.809453Z"}, {"uuid": "7222238a-19a4-43cf-9627-e426a16ad6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47861", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazzooz2h", "content": "", "creation_timestamp": "2025-05-13T06:47:27.466878Z"}, {"uuid": "c04c7007-cf77-40eb-8923-28ab5d1db4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47868", "type": "published-proof-of-concept", "source": "Telegram/JshALOdQpCblmhGq7ZdhNztZhTTSoRL0JEZJxTcvHpwkABc", "content": "", "creation_timestamp": "2025-06-16T17:33:24.000000Z"}, {"uuid": "2815e999-19d1-453b-8710-73e56e8e4167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4786", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16696", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4786\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/view_return. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-16T15:31:04.590Z\n\ud83d\udccf Modified: 2025-05-16T16:26:34.942Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309095\n2. https://vuldb.com/?ctiid.309095\n3. https://vuldb.com/?submit.572297\n4. https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/Return-List/info.md", "creation_timestamp": "2025-05-16T16:34:41.000000Z"}, {"uuid": "60e1cac5-381e-4400-950d-6eb90c6ed789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47868", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18440", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47868\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.\n\ud83d\udccf Published: 2025-06-16T11:00:05.293Z\n\ud83d\udccf Modified: 2025-06-16T11:04:43.267Z\n\ud83d\udd17 References:\n1. https://github.com/apache/nuttx/pull/16000\n2. https://lists.apache.org/thread/p4o2lcqgspx3ws1n2p4wmoqbqow1w1pw", "creation_timestamp": "2025-06-16T11:39:56.000000Z"}, {"uuid": "9ac095c1-6656-4684-beb7-9815bb357278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47869", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47869\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTOS apps/exapmles/xmlrpc application. In this example application device stats structure that stored remotely provided parameters had hardcoded buffer size which could lead to buffer overflow. Structure members buffers were updated to valid size of CONFIG_XMLRPC_STRINGSIZE+1.\n\nThis issue affects Apache NuttX RTOS users that may have used or base their code on example application as presented in releases from 6.22 before 12.9.0.\n\nUsers of XMLRPC in Apache NuttX RTOS are advised to review their code \nfor this pattern and update buffer sizes as presented in the version of \nthe example in release 12.9.0.\n\ud83d\udccf Published: 2025-06-16T11:00:37.755Z\n\ud83d\udccf Modified: 2025-06-16T11:04:46.179Z\n\ud83d\udd17 References:\n1. https://github.com/apache/nuttx-apps/pull/3027\n2. https://lists.apache.org/thread/306qcqyc3bpb2ozh015yxjo9kqs4jbvj", "creation_timestamp": "2025-06-16T11:39:55.000000Z"}, {"uuid": "4e1fdaec-1ff8-4b09-942e-7d9fba4fd125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47865", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47865\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.\n\ud83d\udccf Published: 2025-06-17T17:42:30.922Z\n\ud83d\udccf Modified: 2025-06-18T03:56:07.629Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0019355\n2. https://www.zerodayinitiative.com/advisories/ZDI-25-295/", "creation_timestamp": "2025-06-18T04:39:52.000000Z"}, {"uuid": "0b96bee5-1687-4415-802f-278197d35a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47867", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47867\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations.\n\ud83d\udccf Published: 2025-06-17T17:42:55.846Z\n\ud83d\udccf Modified: 2025-06-18T03:56:08.682Z\n\ud83d\udd17 References:\n1. https://success.trendmicro.com/en-US/solution/KA-0019355\n2. https://www.zerodayinitiative.com/advisories/ZDI-25-297/", "creation_timestamp": "2025-06-18T04:39:51.000000Z"}, {"uuid": "5ac19397-e9aa-4f6f-87ae-10dd114b38c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47863", "type": "seen", "source": "https://t.me/cvedetector/25164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-47863 - Google Chrome Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-47863 \nPublished : May 13, 2025, 4:16 a.m. | 33\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T07:10:49.000000Z"}, {"uuid": "51603b20-1482-47d4-8355-19a7535d9acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47862", "type": "seen", "source": "https://t.me/cvedetector/25163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-47862 - Apache HTTP Web Server Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-47862 \nPublished : May 13, 2025, 4:16 a.m. | 33\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T07:10:45.000000Z"}, {"uuid": "5f623f16-cf4b-4e0e-96e1-dadf3d211984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47861", "type": "seen", "source": "https://t.me/cvedetector/25162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-47861 - Apache HTTP Server Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-47861 \nPublished : May 13, 2025, 4:16 a.m. | 33\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T07:10:45.000000Z"}, {"uuid": "5760163f-c296-4c15-a43a-8398cdb1bf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47864", "type": "seen", "source": "https://t.me/cvedetector/25160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-47864 - Apache HTTP Server XML Entity Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-47864 \nPublished : May 13, 2025, 4:16 a.m. | 33\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T07:10:43.000000Z"}, {"uuid": "5aec9bc7-0f4e-4475-bb7e-dd79acc56084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47860", "type": "seen", "source": "https://t.me/cvedetector/25159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-47860 - Apache HTTP Server Unvalidated User Input\", \n  \"Content\": \"CVE ID : CVE-2025-47860 \nPublished : May 13, 2025, 4:16 a.m. | 33\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T07:10:43.000000Z"}]}