{"metadata": {"vulnerability": "CVE-2025-0133", "count": 135, "kinds": {"milestone": 10, "sighting": 85, "kev": 0, "other": 40}}, "data": [{"timestamp": "2024-12-20T23:23:33.828Z", "date_only": false, "value": "2024-12-20T23:23:33.828Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0133", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": true, "value": "2025-05-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-05-14T14:00:00Z", "date_only": false, "value": "2025-05-14T14:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://security.paloaltonetworks.com/CVE-2025-0133", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "4428980a-0a6f-4f13-8c52-d9947d280dc8", "url": "https://security.paloaltonetworks.com/CVE-2025-0133"}, {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.7.time", "text": "Initial Publication"}, {"timestamp": "2025-05-14T18:07:36.381Z", "date_only": false, "value": "2025-05-14T18:07:36.381Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0133", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-14T18:32:06Z", "date_only": false, "value": "2025-05-14T18:32:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16368", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "53035e8f-fdfc-4393-a73a-708b972a46ef", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0133\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway and portal features of Palo Alto Networks PAN-OS\u00ae software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft\u2014particularly if you enabled Clientless VPN.\n\nThere is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.\n\n\n\nFor GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin  PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005   https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN.\n\ud83d\udccf Published: 2025-05-14T18:07:36.381Z\n\ud83d\udccf Modified: 2025-05-14T18:07:36.381Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2025-0133", "url": "https://t.me/DarkWebInformer_CVEAlerts/16368", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-14T19:03:24.001Z", "date_only": false, "value": "2025-05-14T19:03:24.001091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lp5ou22svk2l", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "fb6fccbc-8819-4207-83be-f37b89deba50", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lp5ou22svk2l"}, {"timestamp": "2025-05-14T19:15:51Z", "date_only": false, "value": "2025-05-14T19:15:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R93P-9JJR-WJHJ", "record": "GHSA-R93P-9JJR-WJHJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-05-14T19:15:51.517Z", "date_only": false, "value": "2025-05-14T19:15:51.517", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0133", "record": "FKIE_CVE-2025-0133", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-05-14T20:51:07.672Z", "date_only": false, "value": "2025-05-14T20:51:07.672908Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0133", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-14T20:51:07.672Z", "date_only": false, "value": "2025-05-14T20:51:07.672908Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0133", "record": "FKIE_CVE-2025-0133", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-14T20:51:15.284Z", "date_only": false, "value": "2025-05-14T20:51:15.284Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0133", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-14T21:31:17Z", "date_only": false, "value": "2025-05-14T21:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R93P-9JJR-WJHJ", "record": "GHSA-R93P-9JJR-WJHJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1064", "record": "WID-SEC-W-2025-1064", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1064", "record": "WID-SEC-W-2025-1064", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1064", "record": "WID-SEC-W-2025-1064", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-14T22:00:00Z", "date_only": false, "value": "2025-05-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1064", "record": "WID-SEC-W-2025-1064", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-05-15T11:19:17.931Z", "date_only": false, "value": "2025-05-15T11:19:17.931+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1064", "record": "WID-SEC-W-2025-1064", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-05-15T19:00:00Z", "date_only": false, "value": "2025-05-15T19:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.6.time", "text": "Added Prisma Access and Cloud NGFW to Affected Products."}, {"timestamp": "2025-05-15T20:00:00Z", "date_only": false, "value": "2025-05-15T20:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.5.time", "text": "Changed Expected Fix Release for PAN-OS 11.2"}, {"timestamp": "2025-05-15T23:03:20.086Z", "date_only": false, "value": "2025-05-15T23:03:20.086756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpampysw2s2t", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "2e190c63-5197-401a-8396-d72759c49b63", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpampysw2s2t"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.4.time", "text": "Removed Prisma Access from Affected Products."}, {"timestamp": "2025-05-21T03:03:19.992Z", "date_only": false, "value": "2025-05-21T03:03:19.992079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpnmhqxshe2e", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "734ed55b-42bb-43b1-93f2-2e2c592d0e85", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpnmhqxshe2e"}, {"timestamp": "2025-05-21T20:30:00Z", "date_only": false, "value": "2025-05-21T20:30:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.3.time", "text": "Removed Cloud NGFW from Affected Products"}, {"timestamp": "2025-05-21T23:03:20.052Z", "date_only": false, "value": "2025-05-21T23:03:20.052178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpppjjknjo2n", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "5aa50890-cd3d-4d13-bc91-8ea542aec428", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lpppjjknjo2n"}, {"timestamp": "2025-05-22T23:16:54.183Z", "date_only": false, "value": "2025-05-22T23:16:54.183161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lpsaqkggxc2u", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "57d3ceeb-0a19-4542-8c90-a8972977bae7", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lpsaqkggxc2u"}, {"timestamp": "2025-06-05T14:45:00Z", "date_only": false, "value": "2025-06-05T14:45:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": true, "value": "2025-06-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0410", "record": "CERTFR-2025-AVI-0410", "field": "vendor_advisories.4.published_at", "linked_record": true}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-10T13:11:56.672Z", "date_only": false, "value": "2025-06-10T13:11:56.672768Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0187", "record": "NCSC-2025-0187", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-06-12T10:00:00Z", "date_only": false, "value": "2025-06-12T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-02", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "35272c1a-0d58-410b-88cb-26d3a8d8d34e", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-02"}, {"timestamp": "2025-06-13T22:23:20Z", "date_only": false, "value": "2025-06-13T22:23:20.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-0133.yaml", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "f5860790-f885-4938-a12b-68bee9c6f331", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-0133.yaml"}, {"timestamp": "2025-06-15T21:02:21.223Z", "date_only": false, "value": "2025-06-15T21:02:21.223088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4gy5e2s", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7e080da3-e2c4-4cc5-96be-a112960283c2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4gy5e2s"}, {"timestamp": "2025-06-17T18:00:17Z", "date_only": false, "value": "2025-06-17T18:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/40858", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "ea08f523-fe0c-4212-b3eb-171c2c89af9a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a CVE-2025-0133 GlobalProtect XSS\nURL\uff1ahttps://github.com/ynsmroztas/-CVE-2025-0133-GlobalProtect-XSS\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/40858", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-17T21:00:05Z", "date_only": false, "value": "2025-06-17T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CLH4SseCbRr0nKmyX9CdMsMp4rSZhsuvGMruCdhCf333MxE", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "bdd0c5d3-90be-428c-893b-d4b2436637b9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T09:00:04Z", "date_only": false, "value": "2025-06-18T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kE0v4NDgxcjvCq3k9GrbFoQKo4jflwAtpLWyV-QtXCFGxCw", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "bf8bca10-598c-497f-ab37-f93f18f4f39a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T11:00:06Z", "date_only": false, "value": "2025-06-18T11:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sG5bEwqwg0wbu2257U_AVP1n6oi1Vbx9RKpot1MOV_JIWfY", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "1a1fcdb6-432a-4f2f-ace7-5221fc5cc777", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T15:00:07Z", "date_only": false, "value": "2025-06-18T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/g7d80VpJOlHePIcqAc0rA1fFLs0W09cr9jX_6fiVzpN02rw", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "adb55a86-505a-438b-ae12-3cfd4f22660f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-18T19:15:00Z", "date_only": false, "value": "2025-06-18T19:15:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.2.time", "text": "Changed Content Version for Mitigation and Updated Version ETAs"}, {"timestamp": "2025-06-18T23:03:19.375Z", "date_only": false, "value": "2025-06-18T23:03:19.375667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lrw4lbxhue2u", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "73ccc05a-338a-492c-8c1f-8faf7d41e701", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lrw4lbxhue2u"}, {"timestamp": "2025-06-19T03:00:09Z", "date_only": false, "value": "2025-06-19T03:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dAy6HTzA5ImDlEhsqhRyCbj7LJDkpc8q7Xczm_pSmSLblNc", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "86dc6d94-2515-4772-97a9-f72092d3ed69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-19T20:33:19.023Z", "date_only": false, "value": "2025-06-19T20:33:19.023056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lryenxvbl22p", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "aa117ce3-b05b-411a-97e5-f3ae5fedf8dd", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lryenxvbl22p"}, {"timestamp": "2025-06-22T06:25:00.786Z", "date_only": false, "value": "2025-06-22T06:25:00.786113Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ls6gntsus42a", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "74a7f5df-659f-40c5-af51-30fe932fc64f", "url": "https://bsky.app/profile/undercode.bsky.social/post/3ls6gntsus42a"}, {"timestamp": "2025-06-24T15:00:06Z", "date_only": false, "value": "2025-06-24T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k_uJMOgtELHod4a59BnUozeRygkUXvqGRYroh9F5_PE7GEQ", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "4f17197b-3121-42bc-865d-4807f5ae8abb", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-24T19:00:05Z", "date_only": false, "value": "2025-06-24T19:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7MW7zOv0TdbqiEW55ttQkmV4myzTV7w2cRbEuquVZ4QPSdc", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "385f1443-c961-451d-b5c8-236a651558f2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-25T14:03:41Z", "date_only": false, "value": "2025-06-25T14:03:41.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/umNlElQGkNBiM7R5tO6hvpgK9c99SRjbad8-RlT59FKYCeU3", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "740f3b86-08b9-48b3-a2fb-29ad4c5b9a87"}, {"timestamp": "2025-06-25T18:13:10.461Z", "date_only": false, "value": "2025-06-25T18:13:10.461073Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lsh7mvqo4d2b", "record": "cve-2025-0133", "field": "creation_timestamp", "uuid": "41d372e8-507a-434c-8890-391c9240782b", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lsh7mvqo4d2b"}, {"timestamp": "2025-06-26T03:42:10.796Z", "date_only": false, "value": "2025-06-26T03:42:10.796035Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lsi7gef7im2v", "record": "cve-2025-0133", "field": "creation_timestamp", "uuid": "7bfa742e-ce83-4317-8572-525321fa97f2", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lsi7gef7im2v"}, {"timestamp": "2025-06-26T18:48:09.928Z", "date_only": false, "value": "2025-06-26T18:48:09.928057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lsjs2fb5r72b", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "d50692f8-399b-4971-9e3d-fefcdb0dbc46", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lsjs2fb5r72b"}, {"timestamp": "2025-06-26T20:40:09.687Z", "date_only": false, "value": "2025-06-26T20:40:09.687246Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lsjycniuxr27", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "918ab33c-c238-4a7c-9fdf-c0a1ef8deb71", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lsjycniuxr27"}, {"timestamp": "2025-07-03T04:21:59.571Z", "date_only": false, "value": "2025-07-03T04:21:59.571549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lszuvynasc2k", "record": "cve-2025-0133", "field": "creation_timestamp", "uuid": "fd7d0107-2a0a-48f8-b43b-17537f3591d3", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lszuvynasc2k"}, {"timestamp": "2025-07-03T19:03:20.391Z", "date_only": false, "value": "2025-07-03T19:03:20.391563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lt3g5xt73y2l", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "31053d38-63a4-49c8-8f21-76f002f4021b", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lt3g5xt73y2l"}, {"timestamp": "2025-07-04T06:30:00Z", "date_only": false, "value": "2025-07-04T06:30:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.1.time", "text": "Added Releases with the Software Fix, Updated Recommended Content Version, and Added Guidance for Prisma Access."}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-07-08T00:00:00Z", "date_only": false, "value": "2025-07-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-07-09T16:00:00Z", "date_only": false, "value": "2025-07-09T16:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.timeline.0.time", "text": "Added fix version for PAN-OS 10.2."}, {"timestamp": "2025-07-09T19:03:24.548Z", "date_only": false, "value": "2025-07-09T19:03:24.548987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3ltkixmin5g2m", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "a4136158-24bf-4fbc-8614-bb1745f07658", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3ltkixmin5g2m"}, {"timestamp": "2025-07-12T03:00:10Z", "date_only": false, "value": "2025-07-12T03:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2xXhGPgo5lMDuKCT2CQCO0nDS34WF8BNrQrYZsghIk6k2wk", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "b6747c94-7c6d-4883-9176-d9925652c3f5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-23T17:12:50.516Z", "date_only": false, "value": "2025-07-23T17:12:50.516876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lunjcsazyb2x", "record": "cve-2025-0133", "field": "creation_timestamp", "uuid": "d4f6c4d2-86a6-4832-b34e-b98fc685dd5a", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lunjcsazyb2x"}, {"timestamp": "2025-07-26T16:18:57Z", "date_only": false, "value": "2025-07-26T16:18:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity_poc/73", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "b57eb093-60ab-4edf-ba6c-21fe562d5f5c", "content": "\ud83d\udea8CVE-2025-0133 : Payload + Template\n\nPayload: %3Csvg%20xmlns%3D%22http%3A%2F%http://2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E\n\nWrite-up: https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9\n\nTemplate: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml", "url": "https://t.me/brutsecurity_poc/73", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-28T10:02:54Z", "date_only": false, "value": "2025-07-28T10:02:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/rafa_sec/251", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "257266f3-c8b1-4bff-aa3e-c3ab2eaca774", "content": "\ud83d\udea8CVE-2025-0133 : Payload + Template\n\nPayload: %3Csvg%20xmlns%3D%22http%3A%2F%http://2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E\n\nWrite-up:\n https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9\n\nTemplate:\n https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml\n\n@rafa_sec", "url": "https://t.me/rafa_sec/251", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-04T09:59:50.557Z", "date_only": false, "value": "2025-08-04T09:59:50.557078Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lvkwplddaq2d", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "88de3d4d-0fe5-4744-b5e2-5de30fd024ff", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lvkwplddaq2d"}, {"timestamp": "2025-09-06T07:03:12.825Z", "date_only": false, "value": "2025-09-06T07:03:12.825948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ly5ma45cu52x", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "852417d6-4396-4127-ba21-81ef365be6e3", "url": "https://bsky.app/profile/undercode.bsky.social/post/3ly5ma45cu52x"}, {"timestamp": "2025-09-11T00:54:53.862Z", "date_only": false, "value": "2025-09-11T00:54:53.862506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lyjjy4l7ug2j", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "bddd668c-26ac-485f-b460-3c05c6b595d5", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lyjjy4l7ug2j"}, {"timestamp": "2025-09-23T23:17:33Z", "date_only": false, "value": "2025-09-23T23:17:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52834", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "cf41ec97-2171-4961-bfd3-a74682cacae2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-0133 Exploit\nURL\uff1ahttps://github.com/adhamelhansye/CVE-2025-0133\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52834", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-24T03:00:06Z", "date_only": false, "value": "2025-09-24T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZS4Ag9c-7esiBEZ5mu1wpc1eMHtZoYfhaZDeb3MBWx4rCqM", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "442d691d-6d54-4041-a305-b40c0d5df8d8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-24T03:00:12Z", "date_only": false, "value": "2025-09-24T03:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n3ODaMCUMNNdMDgBs9ETbBTzs3DxkAn-1u8ExUvii26tLcQ", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "99db0191-983b-453b-a2c6-9ceb63bc419a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2025-11-19T08:00:05.330Z", "date_only": false, "value": "2025-11-19T08:00:05.330398Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/leakix/statuses/115575305122769519", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "873d0f47-a594-4997-91d0-cfa2c7b282c3", "url": "https://mastodon.social/users/leakix/statuses/115575305122769519"}, {"timestamp": "2025-11-19T08:00:06.536Z", "date_only": false, "value": "2025-11-19T08:00:06.536058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m5xrvul5mf2q", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "f45e74b3-1d49-4814-a3b9-964f94c32753", "url": "https://bsky.app/profile/leakix.bsky.social/post/3m5xrvul5mf2q"}, {"timestamp": "2025-12-27T03:51:43.434Z", "date_only": false, "value": "2025-12-27T03:51:43.434045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mawvqkambo2g", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "e3c7c0f2-f1c3-4395-bdf4-b8de155e78bf", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mawvqkambo2g"}, {"timestamp": "2026-02-01T19:09:11.286Z", "date_only": false, "value": "2026-02-01T19:09:11.286796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdszsiqdii2w", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "1fbbd58c-041b-47ef-a221-a202819898c6", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mdszsiqdii2w"}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-02-10T00:00:00Z", "date_only": false, "value": "2026-02-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-02-12T07:00:00Z", "date_only": false, "value": "2026-02-12T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-513708", "record": "SSA-513708", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-11T21:23:49.946Z", "date_only": false, "value": "2026-03-11T21:23:49.946334Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-25-162-02", "record": "ICSA-25-162-02", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-04-02T23:38:11.074Z", "date_only": false, "value": "2026-04-02T23:38:11.074Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0133", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-02T23:38:11.074Z", "date_only": false, "value": "2026-04-02T23:38:11.074Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-03T00:31:08Z", "date_only": false, "value": "2026-04-03T00:31:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R93P-9JJR-WJHJ", "record": "GHSA-R93P-9JJR-WJHJ", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-07T03:00:06Z", "date_only": false, "value": "2026-05-07T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/N1Jo8qZWaWReiL_t-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "504d8eca-83e4-4b0b-a81a-51deec44f8cb"}, {"timestamp": "2026-05-07T03:00:12Z", "date_only": false, "value": "2026-05-07T03:00:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BjOi3LD-ITdETd5g9YWEmnh3F0P_JQYm-8pZfXqVFfSR720", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "61e8b2e6-7939-47d9-90b6-9081306bb755"}, {"timestamp": "2026-06-17T08:25:55.967Z", "date_only": false, "value": "2026-06-17T08:25:55.967", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0133", "record": "FKIE_CVE-2025-0133", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-09T03:00:06.946Z", "date_only": false, "value": "2026-07-09T03:00:06.946301Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2106", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7fd245da-78cf-492b-a6fd-cadaeb304a4c", "content": "\ud83d\udea8CVE-2025-0133 : Payload + Template\n\nPayload: %3Csvg%20xmlns%3D%22http%3A%2F%http://2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E\n\nWrite-up: https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9\n\nTemplate: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml", "url": "https://t.me/brutsecurity/2106"}, {"timestamp": "2026-07-09T03:00:08.080Z", "date_only": false, "value": "2026-07-09T03:00:08.080390Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2012", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "fb0a27c1-cdc0-47b8-b622-6e40ca64c3bd", "content": "\ud83d\udea8 CVE-2025-0133 - medium \ud83d\udea8\n\nPAN-OS - Reflected Cross-Site Scripting\n\n> A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway \n\n\ud83d\udc7e https://t.co/pk8n5FJa8K", "url": "https://t.me/brutsecurity/2012"}, {"timestamp": "2026-07-11T12:00:03.395Z", "date_only": false, "value": "2026-07-11T12:00:03.395483Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2012", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "1b1b882c-0c27-4361-9654-87c56b755619", "content": "\ud83d\udea8 CVE-2025-0133 - medium \ud83d\udea8\n\nPAN-OS - Reflected Cross-Site Scripting\n\n> A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway \n\n\ud83d\udc7e https://t.co/pk8n5FJa8K", "url": "https://t.me/brutsecurity/2012", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T12:00:03.991Z", "date_only": false, "value": "2026-07-11T12:00:03.991366Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/2106", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7a020c13-aaba-40f0-b28c-303f41c8a009", "content": "\ud83d\udea8CVE-2025-0133 : Payload + Template\n\nPayload: %3Csvg%20xmlns%3D%22http%3A%2F%http://2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cscript%3Eprompt%28%22XSS%22%29%3C%2Fscript%3E%3C%2Fsvg%3E\n\nWrite-up: https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9\n\nTemplate: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml", "url": "https://t.me/brutsecurity/2106", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-13T22:00:17.202Z", "date_only": false, "value": "2026-07-13T22:00:17.202476Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/91125", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "b04df373-99f4-4352-9ea8-a8ef737ddec3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2025-0133\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a radityahack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 09:56:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker | by raditya\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91125"}, {"timestamp": "2026-07-15T00:00:24.105Z", "date_only": false, "value": "2026-07-15T00:00:24.105975Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/91125", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "cf595a5e-65ed-4a6f-9fa5-2434250b8b83", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2025-0133\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a radityahack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 09:56:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker | by raditya\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91125", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-16T19:00:27.751Z", "date_only": false, "value": "2026-07-16T19:00:27.751914Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nY3wvwuakLmgR4GAiGW6AZYuuz_v0VZbujaPrFUs5czNJgo", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "dc6bbbf8-7e30-4df9-adb7-c7570f2da628"}, {"timestamp": "2026-07-16T19:00:27.798Z", "date_only": false, "value": "2026-07-16T19:00:27.798159Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "9e85dfb6-e317-4f38-b8b0-81670bcb7af3"}, {"timestamp": "2026-07-18T01:00:03.863Z", "date_only": false, "value": "2026-07-18T01:00:03.863538Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nY3wvwuakLmgR4GAiGW6AZYuuz_v0VZbujaPrFUs5czNJgo", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "21ff8519-03ab-4714-9757-1fd349360ee4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-18T01:00:04.021Z", "date_only": false, "value": "2026-07-18T01:00:04.021165Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "0d417d27-ecdd-45f8-96c2-6872596553a9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:00:18.786Z", "date_only": false, "value": "2026-09-01T20:00:18.786850Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/169116", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "84fc1ddd-85d4-4214-9512-582212de8129", "content": "Mass Hunting RXSS via CVE-2025-0133Continue reading on LegionHunters \u00bb (https://medium.com/legionhunters/3-xss-hackerone-report-got-duplicate-d38db9d3e771?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/169116"}, {"timestamp": "2026-09-01T20:00:18.839Z", "date_only": false, "value": "2026-09-01T20:00:18.839066Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/169600", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "1150c24a-38b5-4b89-bfa7-ded3d4ce32df", "content": "How I Discovered CVE-2025\u20130133 \u2013 Reflected XSS with Shodan Recon\nhttps://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/169600"}, {"timestamp": "2026-09-01T20:00:18.891Z", "date_only": false, "value": "2026-09-01T20:00:18.891016Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/169602", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "878a9bea-6e80-4198-8c29-0b454ee412f7", "content": "Hello Hackers,Continue reading on Medium \u00bb (https://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/169602"}, {"timestamp": "2026-09-01T20:00:19.078Z", "date_only": false, "value": "2026-09-01T20:00:19.078795Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/169111", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "13153b78-fb29-4767-8fe9-92a967f9d363", "content": "3 XSS HackerOne Report got Duplicate\n\nMass Hunting RXSS via CVE-2025-0133Continue reading on LegionHunters \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/169111"}, {"timestamp": "2026-09-01T20:00:20.719Z", "date_only": false, "value": "2026-09-01T20:00:20.719523Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/165869", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7e97361f-a9d2-418d-8cdf-be2a79cc4c82", "content": "\u201cBug Bounty CVE-2025\u20130133 PAN-OS: Reflected Cross-Site Scripting (XSS) \u201cMost Exploited\u2026\nhttps://medium.com/@hariharanhex00/bug-bounty-cve-2025-0133-pan-os-reflected-cross-site-scripting-xss-most-exploited-79832916cfcd?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/165869"}, {"timestamp": "2026-09-01T20:00:20.766Z", "date_only": false, "value": "2026-09-01T20:00:20.766161Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/165871", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "f77f58ff-e3d8-4cb5-92f9-36b97dc00f9f", "content": "A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect gateway and portal features of Palo Alto Networks PAN-OS\u2026Continue reading on Medium \u00bb (https://medium.com/@hariharanhex00/bug-bounty-cve-2025-0133-pan-os-reflected-cross-site-scripting-xss-most-exploited-79832916cfcd?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/165871"}, {"timestamp": "2026-09-01T20:00:21.375Z", "date_only": false, "value": "2026-09-01T20:00:21.375529Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/165261", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "c3db60ce-eb8b-4950-9c14-716155f3ff57", "content": "My Latest Bug: Reflected XSS on GlobalProtect VPN Portal (CVE-2025\u20130133)\nhttps://medium.com/@firdansp/my-latest-bug-reflected-xss-on-globalprotect-vpn-portal-cve-2025-0133-ba1649943250?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/165261"}, {"timestamp": "2026-09-01T20:00:21.418Z", "date_only": false, "value": "2026-09-01T20:00:21.418981Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/165263", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "c60ff91d-8de2-4788-bd1f-9e6d3ac49576", "content": "Hello everyone,Continue reading on Medium \u00bb (https://medium.com/@firdansp/my-latest-bug-reflected-xss-on-globalprotect-vpn-portal-cve-2025-0133-ba1649943250?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/165263"}, {"timestamp": "2026-09-01T20:00:21.464Z", "date_only": false, "value": "2026-09-01T20:00:21.464846Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163911", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "bcd6a91d-c553-4402-8c44-e148e1649b8b", "content": "Hunting Reflected XSS in PAN-OS: A Case Study on CVE-2025\u20130133\nhttps://medium.com/@sangpalisha/hunting-reflected-xss-in-pan-os-a-case-study-on-cve-2025-0133-6f693d211a16?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163911"}, {"timestamp": "2026-09-01T20:00:21.508Z", "date_only": false, "value": "2026-09-01T20:00:21.508968Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163913", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7ba8212c-b1f7-4e8a-8c10-f30ca868ad5a", "content": "Cross-site scripting (XSS) vulnerabilities remain one of the most common and potentially dangerous issues found in web applications. In\u2026Continue reading on Medium \u00bb (https://medium.com/@sangpalisha/hunting-reflected-xss-in-pan-os-a-case-study-on-cve-2025-0133-6f693d211a16?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163913"}, {"timestamp": "2026-09-01T20:00:21.804Z", "date_only": false, "value": "2026-09-01T20:00:21.804993Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163239", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "24a67598-cae7-4015-a99f-570b78735252", "content": "How I Found XSS\u200a\u2014\u200aCVE-2025\u20130133 Using Shodan\nhttps://ch4ndan.medium.com/how-i-found-xss-cve-2025-0133-using-shodan-39a37eae7807?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163239"}, {"timestamp": "2026-09-01T20:00:21.851Z", "date_only": false, "value": "2026-09-01T20:00:21.851903Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163241", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "c50efcca-1912-4f41-97fc-77c25aa2189a", "content": "\ud83d\udc4b Hey Everyone!Continue reading on Medium \u00bb (https://ch4ndan.medium.com/how-i-found-xss-cve-2025-0133-using-shodan-39a37eae7807?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163241"}, {"timestamp": "2026-09-01T20:00:22.051Z", "date_only": false, "value": "2026-09-01T20:00:22.051627Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163198", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "30c52b0e-cb94-40f5-a591-7d5b037d17e1", "content": "CVE-2025-0133 \u2014 Reflected Cross-Site Scripting (XSS) in Palo Alto GlobalProtect VPN Portal\n\nContinue reading on Medium \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/163198"}, {"timestamp": "2026-09-01T20:00:22.123Z", "date_only": false, "value": "2026-09-01T20:00:22.123454Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163205", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "da9d814a-cd6a-4d5b-8de1-b3c67ba05ff0", "content": "CVE-2025-0133\u200a\u2014\u200aReflected Cross-Site Scripting (XSS) in Palo Alto GlobalProtect VPN Portal\nhttps://medium.com/@gourisankara357/cve-2025-0133-reflected-cross-site-scripting-xss-in-palo-alto-globalprotect-vpn-portal-591c5711160f?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163205"}, {"timestamp": "2026-09-01T20:00:22.169Z", "date_only": false, "value": "2026-09-01T20:00:22.169499Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/163207", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "d4f9d64e-7f78-4e79-88b4-888d6600e74b", "content": "Continue reading on Medium \u00bb (https://medium.com/@gourisankara357/cve-2025-0133-reflected-cross-site-scripting-xss-in-palo-alto-globalprotect-vpn-portal-591c5711160f?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163207"}, {"timestamp": "2026-09-03T05:00:05.843Z", "date_only": false, "value": "2026-09-03T05:00:05.843403Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/169602", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "c6816d58-2070-43c9-8faa-a3ffe5db7021", "content": "Hello Hackers,Continue reading on Medium \u00bb (https://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/169602", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T05:00:05.890Z", "date_only": false, "value": "2026-09-03T05:00:05.890562Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/169600", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "7acca3ae-9497-4825-8f60-97bc51a19fb5", "content": "How I Discovered CVE-2025\u20130133 \u2013 Reflected XSS with Shodan Recon\nhttps://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/169600", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T05:00:05.944Z", "date_only": false, "value": "2026-09-03T05:00:05.944611Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/169116", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "fb46ba2a-55d9-4ebc-a2af-2071b459cc19", "content": "Mass Hunting RXSS via CVE-2025-0133Continue reading on LegionHunters \u00bb (https://medium.com/legionhunters/3-xss-hackerone-report-got-duplicate-d38db9d3e771?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/169116", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T06:00:04.507Z", "date_only": false, "value": "2026-09-03T06:00:04.507088Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/165871", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "d2b3f8e3-7f9d-490d-9142-fd3fe171b675", "content": "A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect gateway and portal features of Palo Alto Networks PAN-OS\u2026Continue reading on Medium \u00bb (https://medium.com/@hariharanhex00/bug-bounty-cve-2025-0133-pan-os-reflected-cross-site-scripting-xss-most-exploited-79832916cfcd?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/165871", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T06:00:04.561Z", "date_only": false, "value": "2026-09-03T06:00:04.561787Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/165869", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "59f70930-a7bb-427e-81dc-ef7c9e01e435", "content": "\u201cBug Bounty CVE-2025\u20130133 PAN-OS: Reflected Cross-Site Scripting (XSS) \u201cMost Exploited\u2026\nhttps://medium.com/@hariharanhex00/bug-bounty-cve-2025-0133-pan-os-reflected-cross-site-scripting-xss-most-exploited-79832916cfcd?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/165869", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.382Z", "date_only": false, "value": "2026-09-03T07:00:03.382956Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163241", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "273ecbb3-ac97-49e8-9a8d-da631716b141", "content": "\ud83d\udc4b Hey Everyone!Continue reading on Medium \u00bb (https://ch4ndan.medium.com/how-i-found-xss-cve-2025-0133-using-shodan-39a37eae7807?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163241", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.429Z", "date_only": false, "value": "2026-09-03T07:00:03.429570Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163239", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "951900b9-fc00-4bfc-a1e4-dc1b22be336c", "content": "How I Found XSS\u200a\u2014\u200aCVE-2025\u20130133 Using Shodan\nhttps://ch4ndan.medium.com/how-i-found-xss-cve-2025-0133-using-shodan-39a37eae7807?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163239", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.747Z", "date_only": false, "value": "2026-09-03T07:00:03.747767Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163913", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "c8838c10-8a7d-450e-9d94-7ad13957e921", "content": "Cross-site scripting (XSS) vulnerabilities remain one of the most common and potentially dangerous issues found in web applications. In\u2026Continue reading on Medium \u00bb (https://medium.com/@sangpalisha/hunting-reflected-xss-in-pan-os-a-case-study-on-cve-2025-0133-6f693d211a16?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163913", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.799Z", "date_only": false, "value": "2026-09-03T07:00:03.799307Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163911", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "2ab57e06-6a5f-4534-aefc-99e91e3a2708", "content": "Hunting Reflected XSS in PAN-OS: A Case Study on CVE-2025\u20130133\nhttps://medium.com/@sangpalisha/hunting-reflected-xss-in-pan-os-a-case-study-on-cve-2025-0133-6f693d211a16?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163911", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.850Z", "date_only": false, "value": "2026-09-03T07:00:03.850701Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/165263", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "03ae83a3-eac3-42be-b366-255b34679643", "content": "Hello everyone,Continue reading on Medium \u00bb (https://medium.com/@firdansp/my-latest-bug-reflected-xss-on-globalprotect-vpn-portal-cve-2025-0133-ba1649943250?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/165263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T07:00:03.902Z", "date_only": false, "value": "2026-09-03T07:00:03.902373Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/165261", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "51a74a21-157f-49db-9ef0-1315a8f85d0f", "content": "My Latest Bug: Reflected XSS on GlobalProtect VPN Portal (CVE-2025\u20130133)\nhttps://medium.com/@firdansp/my-latest-bug-reflected-xss-on-globalprotect-vpn-portal-cve-2025-0133-ba1649943250?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/165261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T09:00:06.221Z", "date_only": false, "value": "2026-09-03T09:00:06.221107Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163207", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "23d21d1b-7ef2-4ae6-91fb-363d91761460", "content": "Continue reading on Medium \u00bb (https://medium.com/@gourisankara357/cve-2025-0133-reflected-cross-site-scripting-xss-in-palo-alto-globalprotect-vpn-portal-591c5711160f?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/163207", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T09:00:06.273Z", "date_only": false, "value": "2026-09-03T09:00:06.273749Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/163205", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "3d83e5aa-e90b-48f0-8521-60c0722c0b45", "content": "CVE-2025-0133\u200a\u2014\u200aReflected Cross-Site Scripting (XSS) in Palo Alto GlobalProtect VPN Portal\nhttps://medium.com/@gourisankara357/cve-2025-0133-reflected-cross-site-scripting-xss-in-palo-alto-globalprotect-vpn-portal-591c5711160f?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/163205", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-30T19:00:11Z", "date_only": false, "value": "2026-10-30T19:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ece6aGHyFZCLkeGd3wYP5a77DaNPx3bj8m4qu_yzhgP7qe8", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "4e800aab-aea9-4053-84bc-072af28e6220", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-30T19:00:11Z", "date_only": false, "value": "2026-10-30T19:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ece6aGHyFZCLkeGd3wYP5a77DaNPx3bj8m4qu_yzhgP7qe8", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "a559761c-67fd-417b-984d-710f62da82ad"}], "metrics": {"as_of": "2026-11-07T02:49:13.977Z", "anchors": {"origin": {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-05-14T18:32:06Z", "date_only": false, "value": "2025-05-14T18:32:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16368", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "53035e8f-fdfc-4393-a73a-708b972a46ef", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0133\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway and portal features of Palo Alto Networks PAN-OS\u00ae software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft\u2014particularly if you enabled Clientless VPN.\n\nThere is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.\n\n\n\nFor GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin  PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005   https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN.\n\ud83d\udccf Published: 2025-05-14T18:07:36.381Z\n\ud83d\udccf Modified: 2025-05-14T18:07:36.381Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2025-0133", "url": "https://t.me/DarkWebInformer_CVEAlerts/16368", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 9126.0, "hours": 2.535, "days": 0.105625, "min_seconds": 9126.0, "max_seconds": 9126.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-14T18:32:06Z", "date_only": false, "value": "2025-05-14T18:32:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16368", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "53035e8f-fdfc-4393-a73a-708b972a46ef", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0133\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway and portal features of Palo Alto Networks PAN-OS\u00ae software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft\u2014particularly if you enabled Clientless VPN.\n\nThere is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.\n\n\n\nFor GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin  PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005   https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN.\n\ud83d\udccf Published: 2025-05-14T18:07:36.381Z\n\ud83d\udccf Modified: 2025-05-14T18:07:36.381Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2025-0133", "url": "https://t.me/DarkWebInformer_CVEAlerts/16368", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 46781353.977019, "hours": 12994.820549171944, "days": 541.4508562154977, "min_seconds": 46781353.977019, "max_seconds": 46781353.977019, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-14T16:00:00Z", "date_only": false, "value": "2025-05-14T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0133", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T02:49:13.977Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 46772227.977019, "hours": 12992.285549171944, "days": 541.3452312154976, "min_seconds": 46772227.977019, "max_seconds": 46772227.977019, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-14T18:32:06Z", "date_only": false, "value": "2025-05-14T18:32:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16368", "record": "CVE-2025-0133", "field": "creation_timestamp", "uuid": "53035e8f-fdfc-4393-a73a-708b972a46ef", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0133\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber)\n\ud83d\udd39 Description: A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect\u2122 gateway and portal features of Palo Alto Networks PAN-OS\u00ae software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft\u2014particularly if you enabled Clientless VPN.\n\nThere is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.\n\n\n\nFor GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the informational bulletin  PAN-SA-2025-0005 https://security.paloaltonetworks.com/PAN-SA-2025-0005   https://security.paloaltonetworks.com/PAN-SA-2025-0005 . There is no impact to confidentiality for GlobalProtect users if you did not enable (or you disable) Clientless VPN.\n\ud83d\udccf Published: 2025-05-14T18:07:36.381Z\n\ud83d\udccf Modified: 2025-05-14T18:07:36.381Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2025-0133", "url": "https://t.me/DarkWebInformer_CVEAlerts/16368", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-07T02:49:13.977Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}