{"vulnerability": "CVE-2025-3408", "sightings": [{"uuid": "715a75d2-9179-472e-bdba-8edcc196ca5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3tgbx3ul2s", "content": "", "creation_timestamp": "2025-07-03T23:00:37.956163Z"}, {"uuid": "5d78a781-5e9c-4661-a489-1e830a8d4c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34088", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3tnplqyn2v", "content": "", "creation_timestamp": "2025-07-03T23:04:47.269902Z"}, {"uuid": "e6e18536-28d6-4298-ae87-424949dd0e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3twdp6sk2q", "content": "", "creation_timestamp": "2025-07-03T23:09:36.659998Z"}, {"uuid": "b0505308-6a16-4160-b58e-9a002748fc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3408", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwoesn52q", "content": "", "creation_timestamp": "2025-04-08T05:17:51.874553Z"}, {"uuid": "126731dd-ed16-4615-a256-f7fc2410b553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34082", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3v5vzzcx2m", "content": "", "creation_timestamp": "2025-07-03T23:31:44.810090Z"}, {"uuid": "f1bcb3e6-8e41-4c64-85c8-4b10825b6c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3vyrsf4u2a", "content": "", "creation_timestamp": "2025-07-03T23:46:46.325241Z"}, {"uuid": "c17da6cd-ac50-4fb8-bf90-048c9c589571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34083", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmardtd2x", "content": "", "creation_timestamp": "2025-07-09T21:02:19.345561Z"}, {"uuid": "3eae3059-08a7-44b5-91e5-cffa100bcb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmatwxp2k", "content": "", "creation_timestamp": "2025-07-09T21:02:19.925650Z"}, {"uuid": "fa789b1e-c7dc-4b10-9e80-40783196bbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltj3sbkbrs2i", "content": "", "creation_timestamp": "2025-07-09T05:35:06.891130Z"}, {"uuid": "49e6461c-5ce1-4b88-b42c-9a7fd93861b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lt65bnsdal2u", "content": "", "creation_timestamp": "2025-07-04T21:02:19.494323Z"}, {"uuid": "4fadc547-8fa6-4480-be56-d1f23b4b746e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltxbwwdgl52p", "content": "", "creation_timestamp": "2025-07-14T21:02:22.878035Z"}, {"uuid": "dce6ff78-4f4e-4154-872b-5cc33cd25647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmmret2k", "content": "", "creation_timestamp": "2025-07-17T21:02:33.980955Z"}, {"uuid": "5f315f11-b76b-481e-844c-888fe8547a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34086", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "023b5e65-e45a-4893-8f46-37c9b1c9b814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "70f4f69a-809f-4c81-91f7-4221318cfe4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34088", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "7a8e6112-19f1-4358-a1be-28ce8427afd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "fe453db7-a1f6-48c4-93bf-ab3b5d634b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34082", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "35e2d2c1-2257-4361-bdb2-5b3c0c4c0392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://bsky.app/profile/u2k25.bsky.social/post/3lv3eslev7s2e", "content": "", "creation_timestamp": "2025-07-29T05:29:30.350185Z"}, {"uuid": "87fc15c3-0245-4513-a510-a3d003c78956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "640dcfd0-c96a-4e76-aa21-308ecf1de577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "f75d839d-b71a-4239-a805-66d113fce5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:22.000000Z"}, {"uuid": "71b18543-bd97-4a66-bbbf-835f995c4a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:22.000000Z"}, {"uuid": "e5ffe08a-8394-4b2b-81d6-8f78875b17fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34082", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/igel_command_injection.rb", "content": "", "creation_timestamp": "2021-04-30T20:56:46.000000Z"}, {"uuid": "2485a086-f2df-456e-a6b0-ae287049eb1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34088", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_ping_cmd_exec.rb", "content": "", "creation_timestamp": "2020-04-07T22:03:04.000000Z"}, {"uuid": "4fafa9fc-ea84-401a-ab7a-40dc31d3abea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34086", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/bolt_authenticated_rce.rb", "content": "", "creation_timestamp": "2020-06-29T04:59:18.000000Z"}, {"uuid": "cfd23c2f-ee01-4849-9821-b81735c59249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/http/remote_for_mac_rce.rb", "content": "", "creation_timestamp": "2025-06-08T14:11:56.000000Z"}, {"uuid": "584ec491-ec45-4b2c-86f2-2ef63f6f6ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pihole_whitelist_exec.rb", "content": "", "creation_timestamp": "2020-05-22T20:45:35.000000Z"}, {"uuid": "9bd7148d-369c-48eb-b257-f51bede1d84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:39.000000Z"}, {"uuid": "727c6e79-d8c0-4c80-a902-65d85a8661b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43504", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aSimple File List \u2013 Unauthenticated RCE Exploit (CVE-2025-34085)\nURL\uff1ahttps://github.com/MrjHaxcore/CVE-2025-34085\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-07-10T01:17:03.000000Z"}, {"uuid": "98b26ec3-e80c-42ba-bcf7-3f73d69b8ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43502", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSimple File List \u2013 Unauthenticated RCE Exploit (CVE-2025-34085)\nURL\uff1ahttps://github.com/MrjHaxcore/CVE-2025-\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-10T01:11:58.000000Z"}, {"uuid": "d44d038a-36e9-4c38-a4cc-2be13b5b8ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity_poc/69", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2025-07-13T07:26:52.000000Z"}, {"uuid": "ebe8e8c4-603d-4f18-bf7b-3d4b4db58ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34081", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34081\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.\n\ud83d\udccf Published: 2025-07-01T17:56:56.073Z\n\ud83d\udccf Modified: 2025-07-01T17:56:56.073Z\n\ud83d\udd17 References:\n1. https://jvn.jp/en/vu/JVNVU92266386/", "creation_timestamp": "2025-07-01T18:08:57.000000Z"}, {"uuid": "baf19224-b8ee-4def-a8c0-08b448f491da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34080", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34080\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: The Contec Co.,Ltd. CONPROSYS HMI System (CHS) is vulnerable to Cross-Site Scripting (XSS) in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System (CHS): before 3.7.7.\n\ud83d\udccf Published: 2025-07-01T17:51:53.979Z\n\ud83d\udccf Modified: 2025-07-01T17:51:53.979Z\n\ud83d\udd17 References:\n1. https://jvn.jp/en/vu/JVNVU92266386/", "creation_timestamp": "2025-07-01T18:09:02.000000Z"}, {"uuid": "cb11d66d-02f8-42bd-bd8d-093e5dc6b330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43533", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aSimple File List \u2013 Unauthenticated RCE Exploit (CVE-2025-34085)\nURL\uff1ahttps://github.com/sensesVoid/rce\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-07-10T06:34:21.000000Z"}, {"uuid": "f114e104-045c-4038-ae97-be4da61e74aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/43844", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aMulti-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\nURL\uff1ahttps://github.com/ill-deed/CVE-2025-34085-Multi-target\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-13T01:31:46.000000Z"}, {"uuid": "cd575833-6188-48a6-b4ad-00203a34988c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/44733", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWordPress Simple File List Unauthenticated RCE Exploit\nURL\uff1ahttps://github.com/0xgh057r3c0n/CVE-2025-34085\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-20T16:54:45.000000Z"}, {"uuid": "e839fb77-d085-4a57-891f-a8e611042e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/45374", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-34085\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-34085\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-25T22:18:45.000000Z"}, {"uuid": "dda8d8e3-ff74-4b5b-a7a8-676767612172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/BGbdnO5qVCeRESkVN9shfeMdpVcVG1XeThDpF5WVRjJQCD0", "content": "", "creation_timestamp": "2025-07-22T21:00:04.000000Z"}, {"uuid": "76c633ec-6c60-4da0-b9c1-b218dcb630a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/uY5Tvdm-FXFHtBzqQsCzU1LlN848Rsne5r__eDW06MA9zjM", "content": "", "creation_timestamp": "2025-07-20T21:00:04.000000Z"}, {"uuid": "c7842a79-1b21-40ac-b78b-efcabcad5cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/DRH-CbZo7gKaJp6e4sRAX_WtNevOE1gzfcn9exSBM5ol164", "content": "", "creation_timestamp": "2025-07-23T03:00:11.000000Z"}, {"uuid": "d20d964f-c2c7-4349-83b5-eb522941bf11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/6CrK8yct2XVhw9xn7Sj1KzRk31MKD9wHqqUyultWL2vKHQ4", "content": "", "creation_timestamp": "2025-07-20T23:00:10.000000Z"}, {"uuid": "07d5ab9e-16a1-43e4-a18f-e1e23a6c992f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/gTYHr5OnjUHCdIp65K6L9W7yUzf156DlCKcqsmE_qXGJEH8", "content": "", "creation_timestamp": "2025-07-13T09:00:04.000000Z"}, {"uuid": "dbfcb178-fa1e-4b19-8e22-d127cfc6d601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "Telegram/crpzqjFg2q8jdF8RZFydh5cupcYB9bomukRVrpH_6asC9QA", "content": "", "creation_timestamp": "2025-07-10T09:00:04.000000Z"}, {"uuid": "89c9d005-bec9-40ac-a33d-d33bb86b45c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/MWRVHBu-4Qjayhdv6KdnKclANsWMrG_shZr53uFsPwqxLFo", "content": "", "creation_timestamp": "2025-07-13T11:00:08.000000Z"}, {"uuid": "c95a0784-e95d-4fb6-a060-125c1b7ef867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "Telegram/j9hhUGrn1UjsT61HvOuwLNUknuYr4whXlqdhwz-FvQYkdb4", "content": "", "creation_timestamp": "2025-07-10T07:00:11.000000Z"}, {"uuid": "4a54e890-b9fe-45ef-924a-1047e548e237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3408", "type": "seen", "source": "https://t.me/cvedetector/22384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3408 - Nothings stb Integer Overflow Vulnerability (Remote, Critical)\", \n  \"Content\": \"CVE ID : CVE-2025-3408 \nPublished : April 8, 2025, 4:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stb_dupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T08:08:01.000000Z"}, {"uuid": "a957a440-cf40-476d-b442-b306b1c1e96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3408", "type": "seen", "source": "Telegram/GhCcQwP6QnMjxsfMJ8qz6Pxy9JaPQ-Bi2BXFCcmddlxOyKI", "content": "", "creation_timestamp": "2025-04-08T07:01:28.000000Z"}, {"uuid": "4469dada-6712-4ab9-bf36-55b9541155ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://t.me/brutsecurity/2377", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-09T03:00:06.326674Z"}, {"uuid": "7d1472b2-7abb-433f-b837-a77df0ede4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://t.me/brutsecurity/2077", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-09T03:00:07.017113Z"}, {"uuid": "bccdb3b8-6399-4482-a469-e799cd02041f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://t.me/brutsecurity/2377", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-10T00:00:13.703947Z"}, {"uuid": "556cd7cc-ebf2-4434-9971-54181291f02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "seen", "source": "https://t.me/brutsecurity/2077", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-10T00:00:14.572176Z"}, {"uuid": "d5a0a254-a9c5-4b2d-a575-34763f5565d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2377", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-11T11:00:04.599403Z"}, {"uuid": "8cd85f75-11f7-4a1f-8aee-2436586e4a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2077", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-11T12:00:03.912573Z"}, {"uuid": "8ae433cc-5bed-40d0-946c-fe47b8f9ee64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2077", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-12T00:00:50.359328Z"}, {"uuid": "d06273cc-2a9f-4b7c-911c-e53497f31b96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34085", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2377", "content": "\ud83d\udea8Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.\n\n\u2705https://github.com/ill-deed/CVE-2025-34085-Multi-target", "creation_timestamp": "2026-07-12T00:00:51.219025Z"}, {"uuid": "ddfe7960-04c7-4c66-8c51-d8ce7538e90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34088", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_ping_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Onur ER \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Pandora FMS 7.0NG and lower.\\n          net_tools.php in Pandora FMS 7.0NG allows remote attackers to execute arbitrary OS commands.\", \"disclosure_date\": \"2020-03-09\", \"fullname\": \"exploit/linux/http/pandora_ping_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Pandora FMS Ping Authenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/pandora_ping_cmd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/pandora_ping_cmd_exec\", \"references\": [\"CVE-2025-34088\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.923676Z"}, {"uuid": "f0725cbb-5e0a-444b-8d79-ed0fb0647b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34082", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/igel_command_injection.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Rob Vinson\", \"James Brytan\", \"James Smith\", \"Marisa Mack\", \"Sergey Pashevkin\", \"Steven Laura\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in IGEL OS Secure Terminal\\n          and Secure Shadow services.\\n\\n          Both Secure Terminal (telnet_ssl_connector - 30022/tcp) and Secure\\n          Shadow (vnc_ssl_connector - 5900/tcp) services are vulnerable.\", \"disclosure_date\": \"2021-02-25\", \"fullname\": \"exploit/linux/misc/igel_command_injection\", \"is_install_path\": true, \"mod_time\": \"2026-06-11 10:10:30 +0000\", \"name\": \"IGEL OS Secure VNC/Terminal Command Injection RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/misc/igel_command_injection.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/misc/igel_command_injection\", \"references\": [\"CVE-2025-34082\", \"URL-https://kb.igel.com/securitysafety/en/isn-2021-01-igel-os-remote-command-execution-vulnerability-41449239.html\", \"URL-https://www.igel.com/wp-content/uploads/2021/02/lxos_11.04.270.txt\"], \"rport\": 30022, \"session_types\": false, \"targets\": [\"Secure Terminal Service\", \"Secure Shadow Service\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:17.500356Z"}, {"uuid": "579ce0f6-747e-4559-af9d-f180aaef8da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34089", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/http/remote_for_mac_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Chokri Hammedi ( \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability in\\n          Remote for Mac versions up to and including 2025.7 via the /api/executeScript endpoint.\\n          When authentication is disabled on the target system, it allows attackers to execute\\n          arbitrary AppleScript commands, which can include shell commands via `do shell script`.\\n          All versions up to 2025.7 (including patch versions) are vulnerable.\", \"disclosure_date\": \"2025-05-27\", \"fullname\": \"exploit/osx/http/remote_for_mac_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Remote for Mac Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/osx/http/remote_for_mac_rce.rb\", \"platform\": \"OSX,Unix\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"osx/http/remote_for_mac_rce\", \"references\": [\"CVE-2025-34089\", \"PACKETSTORM-195347\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:30.812788Z"}, {"uuid": "b148b4a4-edd9-4848-a944-1b240150edcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34087", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pihole_whitelist_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"h00die\", \"Denis Andzakovic\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploits a command execution vulnerability in Pi-Hole <= 3.3.\\n          When adding a new domain to the whitelist, it is possible to chain\\n          a command to the domain that is run on the OS.\", \"disclosure_date\": \"2018-04-15\", \"fullname\": \"exploit/unix/http/pihole_whitelist_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Pi-Hole Whitelist OS Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/http/pihole_whitelist_exec.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/http/pihole_whitelist_exec\", \"references\": [\"CVE-2025-34087\", \"URL-https://pulsesecurity.co.nz/advisories/pihole-v3.3-vulns\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:37.364243Z"}, {"uuid": "621f375c-6879-4bb4-afc5-9e1b8e3a4e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34086", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/bolt_authenticated_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"Sivanesh Ashok\", \"r3m0t3nu11\", \"Erik Wynter\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits multiple vulnerabilities in Bolt CMS version 3.7.0\\n          and 3.6.* in order to execute arbitrary commands as the user running Bolt.\\n\\n          This module first takes advantage of a vulnerability that allows an\\n          authenticated user to change the username in /bolt/profile to a PHP\\n          `system($_GET[\\\"\\\"])` variable. Next, the module obtains a list of tokens\\n          from `/async/browse/cache/.sessions` and uses these to create files with\\n          the blacklisted `.php` extention via HTTP POST requests to\\n          `/async/folder/rename`. For each created file, the module checks the HTTP\\n          response for evidence that the file can be used to execute arbitrary\\n          commands via the created PHP $_GET variable. If the response is negative,\\n          the file is deleted, otherwise the payload is executed via an HTTP\\n          get request in this format: `/files/?<$_GET_var>=`\\n\\n          Valid credentials for a Bolt CMS user are required. This module has been\\n          successfully tested against Bolt CMS 3.7.0 running on CentOS 7.\", \"disclosure_date\": \"2020-05-07\", \"fullname\": \"exploit/unix/webapp/bolt_authenticated_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Bolt CMS 3.7.0 - Authenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"NOCVE\": [\"0day\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\", \"artifacts-on-disk\"], \"Stability\": [\"service-resource-loss\"]}, \"path\": \"/modules/exploits/unix/webapp/bolt_authenticated_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"unix/webapp/bolt_authenticated_rce\", \"references\": [\"CVE-2025-34086\", \"EDB-48296\", \"URL-https://github.com/bolt/bolt/releases/tag/3.7.1\"], \"rport\": 8000, \"session_types\": false, \"targets\": [\"Linux (x86)\", \"Linux (x64)\", \"Linux (cmd)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:40.629852Z"}]}