{"vulnerability": "cve-2025-3110", "sightings": [{"uuid": "2ca64859-436c-46a2-bf7d-f87a540ef8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114255426598633822", "content": "", "creation_timestamp": "2025-03-31T05:37:34.168520Z"}, {"uuid": "4aa66836-585f-4c65-9372-efe0a78b892b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114255426598633822", "content": "", "creation_timestamp": "2025-03-31T05:37:34.180552Z"}, {"uuid": "c17ec8f2-5587-4caf-a784-d0e581f0485a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3llgez67qe22e", "content": "", "creation_timestamp": "2025-03-28T08:20:31.810712Z"}, {"uuid": "1bccfcbc-a603-41ab-9666-14946c176aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llggv2r4eo2x", "content": "", "creation_timestamp": "2025-03-28T08:53:59.299399Z"}, {"uuid": "6bacfc0f-fdcd-48b5-b18b-7c3be149b706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zv3ii22s", "content": "", "creation_timestamp": "2025-03-29T21:02:04.035929Z"}, {"uuid": "9b7968c3-d689-4bbe-8d0f-679f41cb9108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkmf6cdwc2b", "content": "", "creation_timestamp": "2025-03-30T00:43:09.501401Z"}, {"uuid": "cc47046e-378f-42e2-beeb-076a58f8b357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3llkmf6cisk2b", "content": "", "creation_timestamp": "2025-03-30T00:43:10.494108Z"}, {"uuid": "ef3e358d-7f64-4203-84e8-cf3d8a20c013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3llzohi2af32r", "content": "", "creation_timestamp": "2025-04-05T00:30:09.316388Z"}, {"uuid": "ab36ec9b-b6f1-4d16-abae-38d9c71f8c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-31100", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lxoayivqy22o", "content": "", "creation_timestamp": "2025-08-31T04:32:10.581931Z"}, {"uuid": "627e4d30-107e-4fa7-a904-51174d05b903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31100", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxoi572txr2n", "content": "", "creation_timestamp": "2025-08-31T06:40:05.854917Z"}, {"uuid": "711bcdbd-b65a-46bd-9997-9e9945daa605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31107", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31107\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-03-27T03:55:07.529Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-03-27T04:26:06.000000Z"}, {"uuid": "c69cc766-bdab-4136-8100-a170e6dbd21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31109", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9021", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31109\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-03-27T03:55:06.572Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-03-27T04:26:11.000000Z"}, {"uuid": "b147b688-bed5-48b8-bd08-443397db0065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31102", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31102\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel allows Reflected XSS. This issue affects Hostel: from n/a through 1.1.5.5.\n\ud83d\udccf Published: 2025-03-28T09:39:50.430Z\n\ud83d\udccf Modified: 2025-03-28T09:39:50.430Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/hostel/vulnerability/wordpress-hostel-plugin-1-1-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-28T10:28:28.000000Z"}, {"uuid": "95df29bf-e53b-48bd-b3a0-69fd428b08af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31101", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31101\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vault Group Pty Ltd VaultRE Contact Form 7 allows Stored XSS.This issue affects VaultRE Contact Form 7: from n/a through 1.0.\n\ud83d\udccf Published: 2025-03-27T22:25:04.290Z\n\ud83d\udccf Modified: 2025-03-28T15:21:55.779Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/wp-plugin-contact-form-7/vulnerability/wordpress-vaultre-contact-form-7-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-03-28T15:28:31.000000Z"}, {"uuid": "485dd63c-ce0d-4525-9e65-06956e30bcd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9588", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31103\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.\n\ud83d\udccf Published: 2025-03-31T04:54:03.868Z\n\ud83d\udccf Modified: 2025-03-31T04:54:03.868Z\n\ud83d\udd17 References:\n1. https://developer.a-blogcms.jp/blog/news/security-update202503.html\n2. https://developer.a-blogcms.jp/blog/news/entry-4197.html\n3. https://jvn.jp/en/jp/JVN66982699/", "creation_timestamp": "2025-03-31T05:31:17.000000Z"}, {"uuid": "8f0f9dae-3a40-42ac-95f8-ed6734747dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18042", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31104\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C)\n\ud83d\udd39 Description: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiADC 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2.0 through 7.2.7, 7.1.0 through 7.1.4, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated attacker to execute unauthorized code via crafted HTTP requests.\n\ud83d\udccf Published: 2025-06-10T16:36:13.131Z\n\ud83d\udccf Modified: 2025-06-11T04:01:45.873Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-25-099", "creation_timestamp": "2025-06-11T04:33:07.000000Z"}, {"uuid": "f4ad167d-0ff9-47d0-b5bf-b124315cc60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31102", "type": "seen", "source": "https://t.me/cvedetector/21398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31102 - Bob Hostel Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-31102 \nPublished : March 28, 2025, 10:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel allows Reflected XSS. This issue affects Hostel: from n/a through 1.1.5.5. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:33:55.000000Z"}, {"uuid": "2f811cca-6b6b-426b-8aad-230f940068fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31101", "type": "seen", "source": "https://t.me/cvedetector/21346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31101 - VaultRE Contact Form 7 Stored Cross-site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-31101 \nPublished : March 27, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vault Group Pty Ltd VaultRE Contact Form 7 allows Stored XSS.This issue affects VaultRE Contact Form 7: from n/a through 1.0. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T01:01:11.000000Z"}, {"uuid": "94f78f05-a349-44d6-b130-d2a9c3a040fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31108", "type": "seen", "source": "https://t.me/cvedetector/21256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31108 - Apache HTTP Server Regular Expression Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-31108 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:12.000000Z"}, {"uuid": "f5a1ccf7-4ab7-4cd8-83e0-604fcb632b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31107", "type": "seen", "source": "https://t.me/cvedetector/21255", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31107 - Fortinet SSL/TLS Rejected Reason\", \n  \"Content\": \"CVE ID : CVE-2025-31107 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:12.000000Z"}, {"uuid": "2e260acd-5542-457e-af9b-e65a384c14d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31106", "type": "seen", "source": "https://t.me/cvedetector/21254", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31106 - Apache HTTP Server Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-31106 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:08.000000Z"}, {"uuid": "31fafe97-adf7-4090-9c1e-466d915688e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31109", "type": "seen", "source": "https://t.me/cvedetector/21257", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31109 - Apache HTTP Server Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-31109 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:13.000000Z"}, {"uuid": "f085da06-3812-42a8-b3ad-5c9a92999452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31105", "type": "seen", "source": "https://t.me/cvedetector/21259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31105 - Apache HTTP Server Unvalidated Request Parameter\", \n  \"Content\": \"CVE ID : CVE-2025-31105 \nPublished : March 27, 2025, 4:15 a.m. | 47\u00a0minutes ago \nDescription : Rejected reason: Not used \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T06:37:15.000000Z"}, {"uuid": "6100e0d4-0896-4c71-ada8-cd783b06e502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31103", "type": "seen", "source": "https://t.me/cvedetector/21557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-31103 - \"a-blog CMS File Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-31103 \nPublished : March 31, 2025, 5:15 a.m. | 1\u00a0hour, 29\u00a0minutes ago \nDescription : Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T09:09:18.000000Z"}]}