{"vulnerability": "cve-2025-6951", "sightings": [{"uuid": "ec90f59f-79ba-4530-85c8-673857450d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6951", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsvrn6xfj72a", "content": "", "creation_timestamp": "2025-07-01T13:12:43.902204Z"}, {"uuid": "ad71a8e7-799c-4152-98f0-5a42e4db4f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdltaxqljz24", "content": "", "creation_timestamp": "2026-01-29T22:23:22.287256Z"}, {"uuid": "6306ce8c-1e7b-4e41-b30d-0f47cb3c5d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://gist.github.com/SNISS/3fc5f128236a7ae6e23bcd028a9e5c0b", "content": "", "creation_timestamp": "2026-01-29T22:22:44.000000Z"}, {"uuid": "5e921fe4-302d-473d-bf1d-610878b582a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdm7ezppxu2c", "content": "", "creation_timestamp": "2026-01-30T02:00:22.799016Z"}, {"uuid": "3c2adbff-6709-4029-b09a-a778ff492407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69517", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdmnytrb6w2a", "content": "", "creation_timestamp": "2026-01-30T06:22:00.286384Z"}, {"uuid": "9ca9f749-3b3c-4f24-83f7-34c865c7dfef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgg7kcltuj2h", "content": "", "creation_timestamp": "2026-03-06T21:02:58.651381Z"}, {"uuid": "e024f4c9-5e47-4bc3-bccc-7cf11bcbc604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6951", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6951\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in SAFECAM X300 up to 20250611. This vulnerability affects unknown code of the component FTP Service. The manipulation leads to use of default credentials. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-07-01T11:32:05.197Z\n\ud83d\udccf Modified: 2025-07-01T11:32:05.197Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.314488\n2. https://vuldb.com/?ctiid.314488\n3. https://vuldb.com/?submit.595454\n4. https://github.com/geo-chen/SAFECAM", "creation_timestamp": "2025-07-01T12:10:32.000000Z"}, {"uuid": "9f0d2938-7660-4f11-b2fd-2440e14ee206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69515", "type": "seen", "source": "Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg", "content": "", "creation_timestamp": "2026-08-27T12:00:05.010487Z"}, {"uuid": "ae171b9f-9382-48b5-8148-d2f54ccf5afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69515", "type": "published-proof-of-concept", "source": "Telegram/AdllQbcuiJ6ibIVVpcDfORf6Hf8QOv6lHxvkWRicfYVDSCg", "content": "", "creation_timestamp": "2026-08-28T00:00:45.705351Z"}, {"uuid": "d6c6bae2-b328-4147-b239-96511e7c5ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb", "content": "{\"aliases\": [], \"arch\": \"python, cmd, x64\", \"author\": [\"Gabriel Gomes\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Server-Side Template Injection (SSTI) vulnerability\\n          in Tactical RMM versions prior to 1.4.0 (CVE-2025-69516).\\n\\n          The reporting template preview endpoint passes user-controlled Jinja2 template\\n          content to Environment.from_string() without sandboxing, allowing arbitrary\\n          Python code execution on the server.\\n\\n          Valid credentials are required. The module authenticates to obtain a Knox API\\n          token, then delivers a Jinja2 SSTI payload through the template preview\\n          functionality to achieve OS command execution.\\n\\n          The vulnerability was silently patched in version 1.4.0 by switching from\\n          jinja2.Environment to jinja2.sandbox.SandboxedEnvironment.\", \"disclosure_date\": \"2026-01-29\", \"fullname\": \"exploit/linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"is_install_path\": true, \"mod_time\": \"2026-03-05 14:01:12 +0000\", \"name\": \"Tactical RMM Jinja2 SSTI Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb\", \"platform\": \"Linux,Python,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"references\": [\"CVE-2025-69516\", \"URL-https://github.com/amidaware/tacticalrmm\", \"URL-https://github.com/NtGabrielGomes/CVE-2025-69516\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Python\", \"Unix/Linux Command\", \"Linux x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.711865Z"}]}