{"vulnerability": "cve-2025-59057", "sightings": [{"uuid": "d17c43da-c61f-4931-97a9-9a3727f156d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22opzydx2g", "content": "", "creation_timestamp": "2026-01-10T03:23:12.822731Z"}, {"uuid": "83245967-7a8c-4c5d-b342-ada0e6ff469d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22plsyrs22", "content": "", "creation_timestamp": "2026-01-10T03:23:42.561479Z"}, {"uuid": "21aef761-d8ce-4d44-8c37-effcc02a5c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc22s2lcsu2p", "content": "", "creation_timestamp": "2026-01-10T03:25:05.016408Z"}, {"uuid": "ee9d2937-aecc-4a55-a84a-32cd6d98bfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/appsecfeed.bsky.social/post/3mca2asjlaa2w", "content": "", "creation_timestamp": "2026-01-12T12:31:23.732906Z"}, {"uuid": "7b92b714-2737-4aec-8daa-342c36a20153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwM_v_5SX0wjW8Bk7vM6o", "content": "", "creation_timestamp": "2026-01-10T04:02:20.000000Z"}, {"uuid": "d99c5d5a-88e2-4fa8-b2ef-45ae106a90c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "published-proof-of-concept", "source": "Telegram/jbT4DyaXAQWEEBg3Kh-8FLm9_wvzpJ1MV36Ko8B3bIBgXlo", "content": "", "creation_timestamp": "2026-01-13T15:00:06.000000Z"}, {"uuid": "8514224d-38a2-4608-afbc-3ce4f77231b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu3p4jzb7g2d", "content": "CVE-2025-59057 is trending. Hype score 7, currently #7 on cvemon.\n\nReact Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-59057", "creation_timestamp": "2026-08-27T20:34:59.756336Z"}, {"uuid": "f753edea-10bb-4649-b853-b6ec32635063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.826249Z"}, {"uuid": "b612c4c4-e66b-466b-bdd2-5aa82c1f12a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-59057", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-03T00:00:48.322768Z"}]}