{"metadata": {"vulnerability": "CVE-2023-25135", "count": 57, "kinds": {"milestone": 5, "sighting": 25, "kev": 11, "other": 16}}, "data": [{"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-25135", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-03T05:15:00Z", "date_only": false, "value": "2023-02-03T05:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R8JW-F89Q-P7G6", "record": "GHSA-R8JW-F89Q-P7G6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-02-03T05:15:00Z", "date_only": false, "value": "2023-02-03T05:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-25135", "record": "GSD-2023-25135", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-02-03T05:15:10.737Z", "date_only": false, "value": "2023-02-03T05:15:10.737", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25135", "record": "FKIE_CVE-2023-25135", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-02-03T06:30:24Z", "date_only": false, "value": "2023-02-03T06:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R8JW-F89Q-P7G6", "record": "GHSA-R8JW-F89Q-P7G6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-02-03T07:25:33Z", "date_only": false, "value": "2023-02-03T07:25:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/57440", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "f31abbdf-3d58-46a9-8a46-de78a631cd74", "content": "\u203c CVE-2023-25135 \u203c\n\nvBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/57440"}, {"timestamp": "2023-02-04T17:08:41Z", "date_only": false, "value": "2023-02-04T17:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AqbQcSruHn_WkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "b6bd2151-51c5-4b15-9ec9-f953d3b4133b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-04T18:01:24Z", "date_only": false, "value": "2023-02-04T18:01:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1362", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "52960fcf-6c2f-494d-b44c-76f0cd4e0a96", "content": "CVE-2023-25135\nvBulletin - RCE + exploit\nman+exploit\n\n#exploit #vBulletin", "url": "https://t.me/proxy_bar/1362", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-05T17:11:01Z", "date_only": false, "value": "2023-02-05T17:11:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2515", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "21ac75a4-30f1-45f3-bc8e-a449789bb00b", "content": "CVE-2023-25135\nvBulletin - RCE + exploit\n\nLink:- https://system32.ink/news-feed/p/217/", "url": "https://t.me/crackcodes/2515", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-05T23:00:00Z", "date_only": false, "value": "2023-02-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0288", "record": "WID-SEC-W-2023-0288", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-02-05T23:00:00Z", "date_only": false, "value": "2023-02-05T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0288", "record": "WID-SEC-W-2023-0288", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-02-05T23:00:00Z", "date_only": false, "value": "2023-02-05T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0288", "record": "WID-SEC-W-2023-0288", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-02-05T23:00:00Z", "date_only": false, "value": "2023-02-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0288", "record": "WID-SEC-W-2023-0288", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-02-13T14:55:00Z", "date_only": false, "value": "2023-02-13T14:55Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-25135", "record": "GSD-2023-25135", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-02-13T15:30:26Z", "date_only": false, "value": "2023-02-13T15:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R8JW-F89Q-P7G6", "record": "GHSA-R8JW-F89Q-P7G6", "field": "modified"}, {"timestamp": "2023-04-16T12:59:50Z", "date_only": false, "value": "2023-04-16T12:59:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RespaldoHackingTeam/1201", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "2a1b04fb-1587-4171-8c34-07ec61886073", "content": "#exploit\n1. CVE-2023-25135: \nPre-authentication RCE\nhttps://github.com/ambionics/vbulletin-exploits\n\n2. CVE-2023-29084:\nCommand injection in ManageEngine ADManager Plus\nhttps://hnd3884.github.io/posts/CVE-2023-29084-Command-injection-in-ManageEngine-ADManager-plus", "url": "https://t.me/RespaldoHackingTeam/1201", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-16T16:39:36Z", "date_only": false, "value": "2023-04-16T16:39:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8127", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "09cd53b1-03ab-4c10-84f2-9b13454c194c", "content": "#exploit\n1. CVE-2023-25135: \nPre-authentication RCE\nhttps://github.com/ambionics/vbulletin-exploits\n\n2. CVE-2023-29084:\nCommand injection in ManageEngine ADManager Plus\nhttps://hnd3884.github.io/posts/CVE-2023-29084-Command-injection-in-ManageEngine-ADManager-plus", "url": "https://t.me/CyberSecurityTechnologies/8127", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-17T20:56:38Z", "date_only": false, "value": "2023-04-17T20:56:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2886", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "afdf24c7-9ed6-4275-81ef-d78060115f34", "content": "Tools - Hackers Factory\n\n\u200b\u200bMobSF\n\nMobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.\n\nhttps://github.com/MobSF/Mobile-Security-Framework-MobSF\n\n\u200b\u200bvBulletin Exploits\n\nCVE-2023-25135: Pre-authentication RCE.\n\nhttps://github.com/ambionics/vbulletin-exploits\n\nDetails:\nhttps://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable\n\n\u200b\u200bInternet of Vulnerable Things\n\nThe results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.\n\nhttps://github.com/otsmr/internet-of-vulnerable-things\n\n\u200b\u200bOSTIF\n\nSecurity Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF\n\nhttps://github.com/ostif-org/OSTIF\n\n\u200b\u200bSocial Media #OSINT\n\nhttps://github.com/cqcore/Social-Media-OSINT\n\n\u200b\u200bWhatWaf\n\nWhatWaf is an advanced firewall detection tool who's goal is to give you the idea of \"There's a WAF?\". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass (or two) for said firewall, on the specified target.\n\nhttps://github.com/Ekultek/WhatWaf\n\n\u200b\u200bESP32Marauder\n\nA suite of WiFi/Bluetooth offensive and defensive tools for the #ESP32\n\nhttps://github.com/justcallmekoko/ESP32Marauder\n\n\u200b\u200bWarpgate\n\nA smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.\n\n\u2022 Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network.\n\u2022 Warpgate will record every session for you to view (live) and replay later through a built-in admin web UI.\n\u2022 Written in 100% safe Rust.\n\nhttps://github.com/warp-tech/warpgate\n\n\u200b\u200bWAFW00F\n\nAllows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.\n\nhttps://github.com/EnableSecurity/wafw00f\n\n\u200b\u200bTiny-XSS-Payloads\n\nA collection of tiny XSS Payloads that can be used in different contexts.\n\nhttps://github.com/terjanq/Tiny-XSS-Payloads\n\nWeb:\nhttps://tinyxss.terjanq.me\n\n\u200b\u200bD/Invoke\n\nDynamically invoke arbitrary unmanaged code from managed code without P/Invoke.\n\nhttps://github.com/rasta-mouse/DInvoke\n\nDetails:\nhttps://offensivedefence.co.uk/posts/dinvoke-105\n\n\u200b\u200bCloudGPT\n\nVulnerability scanner for AWS customer managed policies using #ChatGPT\n\nhttps://github.com/ustayready/cloudgpt\n\n\u200b\u200bVX-API\n\nCollection of various malicious functionality to aid in malware development.\n\nhttps://github.com/vxunderground/VX-API\n\n\u200b\u200bBitdrain \n\nRemote p2p bandwidth/cpu overage attack against bitcoin, dogecoin, etc.\n\nhttps://github.com/visualbasic6/drain\n\n\u200b\u200bMaltego Web2Screenshot Transforms\n\nThe #Maltego Web2Screenshot Transforms allow you to capture screenshots from both websites and URLs in a secure and anonymous manner.\n\nI developed these transforms to enhance my operational security (OPSEC) by avoiding exposing my public or VPN's IP address. With these Transforms, you can generate high-quality screenshots while keeping your identity and location hidden.\n\nhttps://github.com/TURROKS/Maltego_Web2Screenshot\n\n\u200b\u200bGEF \n\nGDB Enhanced Features a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux.\n\nhttps://github.com/hugsy/gef\n\n\u200b\u200bCortex XDR Config Extractor\n\nWith this tool its possible to parse the Database Lock Files of the Cortex XDR Agent by Palo Alto Networks and extract Agent Settings, the Hash and Salt of the Uninstall Password, as well as possible Exclusions.\n\nhttps://github.com/Laokoon-SecurITy/Cortex-XDR-Config-Extractor\n\n\u200b\u200bBounty Meter\n\nCommand-line utility tool designed for bug bounty hunters to define their bounty target for a year, maintain and keep record of their bounties on a monthly basis, and track their progress throughout the year. With Bounty Meter, you can add and subtract bounties, view your total bounties earned this year, and display an interactive stats card to visualize your progress.\n\nhttps://github.com/720922/bountymeter\n\n#infosec #cybersec", "url": "https://t.me/dilagrafie/2886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-17T22:46:51Z", "date_only": false, "value": "2023-04-17T22:46:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RespaldoHackingTeam/1305", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "e25cc4ca-c8b2-4d49-8747-8c4a57bf9cc9", "content": "\u200b\u200bvBulletin Exploits\n\nCVE-2023-25135: Pre-authentication RCE.\n\nhttps://github.com/ambionics/vbulletin-exploits\n\nDetails:\nhttps://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable\n\n#cve #infosec #exploit", "url": "https://t.me/RespaldoHackingTeam/1305", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-19T17:44:57Z", "date_only": false, "value": "2023-04-19T17:44:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RespaldoHackingTeam/1450", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "f0746a78-7aef-444d-8844-bcb32ec9a4f8", "content": "Linux Bluetooth: Unauthorized management command execution (CVE-2023-2002)\nhttps://github.com/lrh2000/CVE-2023-2002\nCVE-2023-25135: vBulletin Pre-authentication RCE \nhttps://github.com/ambionics/vbulletin-exploits", "url": "https://t.me/RespaldoHackingTeam/1450", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-20T00:26:18Z", "date_only": false, "value": "2023-05-20T00:26:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4933", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "ef62c884-d36c-47b4-acc3-fe1f2f048f44", "content": "CVE-2023-25135: Pre-authentication RCE\n\nGithub\n\n#CVE #RCE #Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4933", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:40.816Z", "date_only": false, "value": "2023-12-13T01:20:40.816393Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-25135", "record": "GSD-2023-25135", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T11:18:35.592Z", "date_only": false, "value": "2024-08-02T11:18:35.592Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-25135", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:43:04.110Z", "date_only": false, "value": "2024-08-15T17:43:04.110+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0288", "record": "WID-SEC-W-2023-0288", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-21T00:00:00Z", "date_only": false, "value": "2024-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-21)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "8cbf4d1e-e42a-4d3f-92ec-7a09693c5f79", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-26T14:51:25.215Z", "date_only": false, "value": "2025-03-26T14:51:25.215494Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25135", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-26T14:51:25.215Z", "date_only": false, "value": "2025-03-26T14:51:25.215494Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25135", "record": "FKIE_CVE-2023-25135", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-26T14:52:17.030Z", "date_only": false, "value": "2025-03-26T14:52:17.030Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-26T14:52:17.030Z", "date_only": false, "value": "2025-03-26T14:52:17.030Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25135", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-25135", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "780135e0-0bca-485e-9baa-4cad0f186338", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-25135", "field": "evidence.0.details.added_date", "uuid": "780135e0-0bca-485e-9baa-4cad0f186338", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "e4dc4693-230d-4d19-b623-1a60e71604ff", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "780135e0-0bca-485e-9baa-4cad0f186338", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-25135", "field": "status.status_updated_at", "uuid": "780135e0-0bca-485e-9baa-4cad0f186338", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "b1566cd1-722a-4f1a-9513-b54e01a9cc65", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "3c6b8679-f72b-44e8-889e-a63e7d12b02f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "ae2982e1-a9e2-4a54-b776-7b0045bc472c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "fd7019b7-932f-434f-8518-0c4b3c9fbbac", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "660eb017-5fec-4aa6-9461-9bb21b027d9f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "e0a4accc-44f2-4653-800e-98fa32527e88", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "a6d1d409-c24b-4518-bdc4-d10b0a3d3a3e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "e9cbc701-ee01-460e-87f7-664dd792c52e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "00b3ab09-acfc-447d-afdd-f96f2d28d0fa", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-16T00:00:00Z", "date_only": false, "value": "2026-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-16)", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "81cbeac0-0964-428a-8078-cd0994bd0ce3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:40:45.027Z", "date_only": false, "value": "2026-06-17T05:40:45.027", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25135", "record": "FKIE_CVE-2023-25135", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:01.711Z", "date_only": false, "value": "2026-06-19T12:46:01.711777Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/377209d5-00f0-4776-b1d1-f754c2beac49", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "12665c09-0ccf-4a47-8bc2-60789a775ff4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/377209d5-00f0-4776-b1d1-f754c2beac49", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-25135", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "780135e0-0bca-485e-9baa-4cad0f186338", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:25.346Z", "date_only": false, "value": "2026-06-23T14:03:25.346334Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/780135e0-0bca-485e-9baa-4cad0f186338", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "15a9bb0f-f165-40dd-b365-ed4791848edc", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/780135e0-0bca-485e-9baa-4cad0f186338", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:34.359Z", "date_only": false, "value": "2026-06-30T09:23:34.359634Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b76e26d2-8f68-489c-8186-88b07a9719c4", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "0f9eb928-bffc-4ec9-bc17-ee12335dc3f5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b76e26d2-8f68-489c-8186-88b07a9719c4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.last_seen_at", "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-25135", "field": "evidence.0.details.observation_date", "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-25135", "field": "status.status_updated_at", "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-10-28T21:00:45.846Z", "anchors": {"origin": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-02-04T17:08:41Z", "date_only": false, "value": "2023-02-04T17:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AqbQcSruHn_WkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "b6bd2151-51c5-4b15-9ec9-f953d3b4133b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 21913064.0, "hours": 6086.962222222222, "days": 253.62342592592591, "min_seconds": 21826664.0, "max_seconds": 21913064.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 21913064.0, "hours": 6086.962222222222, "days": 253.62342592592591, "min_seconds": 21826664.0, "max_seconds": 21913064.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 148121.0, "hours": 41.14472222222222, "days": 1.714363425925926, "min_seconds": 61721.0, "max_seconds": 148121.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-02-04T17:08:41Z", "date_only": false, "value": "2023-02-04T17:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AqbQcSruHn_WkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "b6bd2151-51c5-4b15-9ec9-f953d3b4133b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 117838845.846745, "hours": 32733.012735206943, "days": 1363.8755306336227, "min_seconds": 117752445.846745, "max_seconds": 117838845.846745, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25135", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T21:00:45.846Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 95925781.846745, "hours": 26646.050512984722, "days": 1110.2521047076968, "min_seconds": 95925781.846745, "max_seconds": 95925781.846745, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-14T14:57:44Z", "date_only": false, "value": "2023-10-14T14:57:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25135", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "b76e26d2-8f68-489c-8186-88b07a9719c4", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T21:00:45.846Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 117690724.846745, "hours": 32691.868012984723, "days": 1362.1611672076967, "min_seconds": 117690724.846745, "max_seconds": 117690724.846745, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-02-04T17:08:41Z", "date_only": false, "value": "2023-02-04T17:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AqbQcSruHn_WkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg", "record": "CVE-2023-25135", "field": "creation_timestamp", "uuid": "b6bd2151-51c5-4b15-9ec9-f953d3b4133b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T21:00:45.846Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}