https://vulnerability.circl.lu/sightings/feed 2026-08-15T03:01:54.018272+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/08ef99af-65cf-4564-98b5-514c6000a74d/export 2026-08-15T03:01:54.048394+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08ef99af-65cf-4564-98b5-514c6000a74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23210", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/232", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Guardian \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0432\u0435\u0431\u043a\u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f IDOR \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435 \u0447\u0430\u0442\u0430, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 Gitea\u2011\u043a\u0440\u0435\u0434 \u27a1\ufe0f \u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PhpSpreadsheet, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e XLSX-\u0444\u0430\u0439\u043b\u0430 \u0438 \u0437\u0430\u0431\u0440\u0430\u0442\u044c cookie \u043b\u0435\u043a\u0442\u043e\u0440\u0430 (CVE-2025-23210, CVE-2025-22131) \u27a1\ufe0f \u0414\u0430\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CSRF, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u0441 \u0440\u043e\u043b\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u27a1\ufe0f RCE \u0447\u0435\u0440\u0435\u0437 LFI + PHP Filter Chain \u27a1\ufe0f \u0412 mysql \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0445\u044d\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u0440\u0443\u0442\u0438\u043c \u0438\u0445, \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u0432 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u27a1\ufe0f \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 python \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0438 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u0432 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 safeapache2ctl (\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b)\n\nAdvanced ffuf usage:\nffuf -u 'http://portal.guardian.htb/login.php' -d 'username=GUCOUNTYEAR&password=GU1234' -w <( seq -w 000 999):COUNT -w <( seq 2020 2026):YEAR -H \"Content-Type: application/x-www-form-urlencoded\" -ac\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Guardian, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Hard\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:40.250963Z"} 2026-08-06T00:00:40.250963+00:00 https://vulnerability.circl.lu/sighting/26b620ab-c301-4643-8500-1637c7f0a7a5/export 2026-08-15T03:01:54.052511+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26b620ab-c301-4643-8500-1637c7f0a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23210", "type": "seen", "source": "https://t.me/bagl3y_notes/232", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Guardian \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0432\u0435\u0431\u043a\u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f IDOR \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435 \u0447\u0430\u0442\u0430, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 Gitea\u2011\u043a\u0440\u0435\u0434 \u27a1\ufe0f \u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PhpSpreadsheet, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e XLSX-\u0444\u0430\u0439\u043b\u0430 \u0438 \u0437\u0430\u0431\u0440\u0430\u0442\u044c cookie \u043b\u0435\u043a\u0442\u043e\u0440\u0430 (CVE-2025-23210, CVE-2025-22131) \u27a1\ufe0f \u0414\u0430\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CSRF, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u0441 \u0440\u043e\u043b\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u27a1\ufe0f RCE \u0447\u0435\u0440\u0435\u0437 LFI + PHP Filter Chain \u27a1\ufe0f \u0412 mysql \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0445\u044d\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u0440\u0443\u0442\u0438\u043c \u0438\u0445, \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u0432 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u27a1\ufe0f \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 python \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0438 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u0432 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 safeapache2ctl (\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b)\n\nAdvanced ffuf usage:\nffuf -u 'http://portal.guardian.htb/login.php' -d 'username=GUCOUNTYEAR&password=GU1234' -w <( seq -w 000 999):COUNT -w <( seq 2020 2026):YEAR -H \"Content-Type: application/x-www-form-urlencoded\" -ac\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Guardian, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Hard\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:41.519220Z"} 2026-08-05T00:00:41.519220+00:00 https://vulnerability.circl.lu/sighting/ce4adef7-28be-4165-9387-90da2d4975a0/export 2026-08-15T03:01:54.052676+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ce4adef7-28be-4165-9387-90da2d4975a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23210", "type": "seen", "source": "https://t.me/bagl3y_notes/232", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 \ud83d\udc9a (HackTheBox) \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f Guardian \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0432\u0435\u0431\u043a\u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f IDOR \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0435 \u0447\u0430\u0442\u0430, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 Gitea\u2011\u043a\u0440\u0435\u0434 \u27a1\ufe0f \u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PhpSpreadsheet, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c XSS \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e XLSX-\u0444\u0430\u0439\u043b\u0430 \u0438 \u0437\u0430\u0431\u0440\u0430\u0442\u044c cookie \u043b\u0435\u043a\u0442\u043e\u0440\u0430 (CVE-2025-23210, CVE-2025-22131) \u27a1\ufe0f \u0414\u0430\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CSRF, \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u0441 \u0440\u043e\u043b\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u27a1\ufe0f RCE \u0447\u0435\u0440\u0435\u0437 LFI + PHP Filter Chain \u27a1\ufe0f \u0412 mysql \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0445\u044d\u0448\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0431\u0440\u0443\u0442\u0438\u043c \u0438\u0445, \u043c\u0438\u0433\u0440\u0438\u0440\u0443\u0435\u043c \u0432 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u044e\u0437\u0435\u0440\u0430 \u27a1\ufe0f \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 python \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0438 \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u044f \u0432 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u27a1\ufe0f root \u0447\u0435\u0440\u0435\u0437 safeapache2ctl (\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b)\n\nAdvanced ffuf usage:\nffuf -u 'http://portal.guardian.htb/login.php' -d 'username=GUCOUNTYEAR&password=GU1234' -w <( seq -w 000 999):COUNT -w <( seq 2020 2026):YEAR -H \"Content-Type: application/x-www-form-urlencoded\" -ac\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Guardian, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Hard\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:25.822562Z"} 2026-08-04T13:00:25.822562+00:00 https://vulnerability.circl.lu/sighting/b65b6f75-3d20-4451-84bd-83f0f87e4d8a/export 2026-08-15T03:01:54.052801+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b65b6f75-3d20-4451-84bd-83f0f87e4d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23210", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50333", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPOC for the vuln CVE-2025-23210\nURL\uff1ahttps://github.com/s0ck37/CVE-2025-23210-POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-05T06:01:23.000000Z"} 2025-09-05T06:01:23+00:00 https://vulnerability.circl.lu/sighting/8b6488ff-9951-4e76-9c07-c4ed9aba79f6/export 2026-08-15T03:01:54.052909+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8b6488ff-9951-4e76-9c07-c4ed9aba79f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23212", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"} 2025-09-01T19:03:02+00:00 https://vulnerability.circl.lu/sighting/9e85a9bd-69ba-45d4-b0d1-f0f4c3472835/export 2026-08-15T03:01:54.053010+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9e85a9bd-69ba-45d4-b0d1-f0f4c3472835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23213", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"} 2025-09-01T19:03:02+00:00 https://vulnerability.circl.lu/sighting/e4c973b3-b85f-4ff1-a585-e79b986afa24/export 2026-08-15T03:01:54.053107+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e4c973b3-b85f-4ff1-a585-e79b986afa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23211", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53524", "content": "CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution\nhttps://www.offsec.com/blog/cve-2025-23211/\n\nA criticial SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise. \nThe post CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution (https://www.offsec.com/blog/cve-2025-23211/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-05-08T21:17:38.000000Z"} 2025-05-08T21:17:38+00:00 https://vulnerability.circl.lu/sighting/01772b21-e852-4480-869a-f67745a19f36/export 2026-08-15T03:01:54.053211+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "01772b21-e852-4480-869a-f67745a19f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23215", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23215\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Clear)\n\ud83d\udd39 Description: PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphrase is, it must also be considered potentially compromised. As a mitigation, both compromised keys have been revoked so that no future use of the keys are possible. Note, that the published artifacts in Maven Central under the group id net.sourceforge.pmd are not compromised and the signatures are valid.\n\ud83d\udccf Published: 2025-01-31T15:25:53.026Z\n\ud83d\udccf Modified: 2025-04-04T21:08:48.961Z\n\ud83d\udd17 References:\n1. https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84\n2. https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362\n3. https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891", "creation_timestamp": "2025-04-04T21:36:15.000000Z"} 2025-04-04T21:36:15+00:00 https://vulnerability.circl.lu/sighting/3db223dc-1b33-47ec-b7dc-2384b287df3e/export 2026-08-15T03:01:54.053324+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3db223dc-1b33-47ec-b7dc-2384b287df3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2321", "type": "seen", "source": "https://t.me/cvedetector/20367", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-2321 - Springboot OpenAI ChatGPT Remote Business Logic Error Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-2321 \nPublished : March 15, 2025, 12:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"15 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T15:17:12.000000Z"} 2025-03-15T15:17:12+00:00 https://vulnerability.circl.lu/sighting/2c9581a4-889c-4903-9f59-5c3345560939/export 2026-08-15T03:01:54.053432+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2c9581a4-889c-4903-9f59-5c3345560939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkgfmsfqlg2x", "content": "", "creation_timestamp": "2025-03-15T15:06:16.685431Z"} 2025-03-15T15:06:16.685431+00:00