{"metadata": {"vulnerability": "CVE-2025-2747", "count": 49, "kinds": {"milestone": 4, "sighting": 22, "kev": 11, "other": 12}, "linked_omitted": 0}, "data": [{"timestamp": "2025-03-24T16:39:13.884Z", "date_only": false, "value": "2025-03-24T16:39:13.884Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-24T19:15:51Z", "date_only": false, "value": "2025-03-24T19:15:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8345-RFQ2-7H8Q", "record": "GHSA-8345-RFQ2-7H8Q", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-24T19:15:51.967Z", "date_only": false, "value": "2025-03-24T19:15:51.967", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2747", "record": "FKIE_CVE-2025-2747", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T19:40:27.515Z", "date_only": false, "value": "2025-03-24T19:40:27.515648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5ea2q522", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "be5c9436-7383-4a5c-9839-d66dda3533e5", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ll5j5ea2q522"}, {"timestamp": "2025-03-24T20:39:46.326Z", "date_only": false, "value": "2025-03-24T20:39:46.326821Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfxkvq2w", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "246d81bb-2231-4950-b617-87bb48cb5de2", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5mhfxkvq2w"}, {"timestamp": "2025-03-24T20:48:56.013Z", "date_only": false, "value": "2025-03-24T20:48:56.013242Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114219373984443049", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "ed34e1b4-2982-40ca-8175-1da80b572f89", "url": "https://mastodon.social/users/CyberSignaler/statuses/114219373984443049"}, {"timestamp": "2025-03-24T21:30:33Z", "date_only": false, "value": "2025-03-24T21:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8345-RFQ2-7H8Q", "record": "GHSA-8345-RFQ2-7H8Q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T22:15:42.429Z", "date_only": false, "value": "2025-03-24T22:15:42.429620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5rsxdjlz2q", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "c56336ae-24f7-4e20-8d54-6e8f072032ef", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5rsxdjlz2q"}, {"timestamp": "2025-03-24T22:35:12Z", "date_only": false, "value": "2025-03-24T22:35:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20998", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "8af7757b-69e1-4e88-80e2-819d35fa765e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2747 - Kentico Xperience Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-2747 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20998"}, {"timestamp": "2025-03-27T03:10:38.145Z", "date_only": false, "value": "2025-03-27T03:10:38.145294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "dc178524-839f-4d06-9d27-bd54d07f4593", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lldda6gnu62u"}, {"timestamp": "2025-03-27T16:16:23.303Z", "date_only": false, "value": "2025-03-27T16:16:23.303355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "7137d1c1-28dd-4508-a16b-c0f42bdbfd7c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3llep57giec2x"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-05135", "record": "CNVD-2026-05135", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-04-01T23:39:21.352Z", "date_only": false, "value": "2025-04-01T23:39:21.352978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "50cf28da-b29c-4dfd-8fea-28dd3ea12e22", "url": "https://bsky.app/profile/opsmatters.bsky.social/post/3lls27vr5q22i"}, {"timestamp": "2025-05-07T15:48:27Z", "date_only": false, "value": "2025-05-07T15:48:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/299", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "8eb977b8-4c0a-4bc4-8b4a-8d4e2ad0105d", "content": "Code execution, and bypass vulnerabilities \u2014 for educational purposes only:\n\n\n1. CVE-2025-47241 \u2013 Whitelist bypass in Browser Use tool (CVSS 9.3)\n2. CVE-2025-25014 \u2013 Prototype pollution in Kibana (CVSS 9.1)\n3. CVE-2025-29927 \u2013 Next.js middleware authorization bypass (CVSS 9.1)\n4. CVE-2025-24813 \u2013 Apache Tomcat path traversal RCE (Critical)\n5. CVE-2025-2783 \u2013 Chrome Mojo use-after-free (High)\n6. CVE-2025-2636 \u2013 WordPress InstaWP plugin LFI (High)\n7. CVE-2025-2505 \u2013 WordPress Age Gate plugin LFI (High)\n8. CVE-2025-2746 \u2013 Kentico CMS auth bypass (CVSS 9.8)\n9. CVE-2025-2747 \u2013 Kentico CMS staging sync auth bypass (CVSS 9.8)\n10. CVE-2025-3066 \u2013 Chrome Site Isolation use-after-free (High)\n11. CVE-2025-46728 \u2013 cpp-httplib DoS vulnerability\n12. CVE-2025-12345 \u2013 Buffer overflow in XYZ app (CVSS 9.0)\n13. CVE-2025-12346 \u2013 SQL injection in ABC web app (CVSS 8.5)\n14. CVE-2025-12347 \u2013 XSS in DEF platform (CVSS 7.8)\n15. CVE-2025-12348 \u2013 Auth bypass in GHI system (CVSS 9.2)\n16. CVE-2025-12349 \u2013 RCE in JKL service via crafted packets (CVSS 9.5)\n17. CVE-2025-12350 \u2013 Privilege escalation in MNO app (CVSS 8.7)\n18. CVE-2025-12351 \u2013 Info disclosure in PQR system (CVSS 7.5)\n19. CVE-2025-12352 \u2013 DoS in STU server (CVSS 6.8)\n20. CVE-2025-12353 \u2013 Directory traversal in VWX app (CVSS 8.0)\n21. CVE-2025-12354 \u2013 Command injection in YZA tool (CVSS 9.1)\n22. CVE-2025-12355 \u2013 Insecure deserialization in BCD lib (CVSS 9.3)\n23. CVE-2025-12356 \u2013 CSRF in EFG portal (CVSS 7.2)\n24. CVE-2025-12357 \u2013 Memory corruption in HIJ driver (CVSS 8.9)\n25. CVE-2025-12358 \u2013 Improper auth in KLM API (CVSS 9.0)\n\n#HackersFactory", "url": "https://t.me/NinjaSec/299"}, {"timestamp": "2025-05-19T12:58:14Z", "date_only": false, "value": "2025-05-19T12:58:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSec/298", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "5a5a942b-5313-4c3b-adc2-3a6eb8ec9cbc", "content": "Certainly! Below is a curated list of critical CVEs from 2025 that involve code execution, browser bypasses, and internal service exposure. These are provided strictly for educational purposes to aid in understanding and mitigating such vulnerabilities.\n\n\n\ud83d\udd10 Critical CVEs from 2025 (Educational Use Only)\n\n1. CVE-2025-47241\n\nDescription: Whitelist bypass in the Browser Use automation tool allows attackers to access internal services via crafted URLs.\n\nCVSS Score: 9.3\n\nReference: \n\n\n\n2. CVE-2025-25014\n\nDescription: Prototype pollution in Kibana leads to arbitrary code execution through crafted HTTP requests to machine learning and reporting endpoints.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n3. CVE-2025-29927\n\nDescription: Authorization bypass in Next.js middleware allows attackers to access protected routes by manipulating internal headers.\n\nCVSS Score: 9.1\n\nReference: \n\n\n\n4. CVE-2025-24813\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n5. CVE-2025-2783\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n6. CVE-2025-2636\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n7. CVE-2025-2505\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n8. CVE-2025-2746 & CVE-2025-2747\n\nDescription: \n\nCVSS Score: \n\nReference: \n\n\n\n9. CVE-2025-3066\n\nDescription: \n\nCVSS Score: High\n\nReference: \n\n\n\n10. CVE-2025-46728\n\nDescription: Denial of Service vulnerability in cpp-httplib, potentially exposing servers to service disruptions.\n\nCVSS Score: High\n\nReference: \n\n#HackersFactory", "url": "https://t.me/NinjaSec/298"}, {"timestamp": "2025-08-11T18:27:48Z", "date_only": false, "value": "2025-08-11T18:27:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "935fc57e-8e7a-4e26-9ebf-79d555644903"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": true, "value": "2025-10-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2747", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": true, "value": "2025-10-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "evidence.0.details.date_added", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "status.status_updated_at", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2747", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-2747 added to CISA KEV"}, {"timestamp": "2025-10-20T15:27:58.487Z", "date_only": false, "value": "2025-10-20T15:27:58.487447Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatint.eu/post/3m3n4x752yd27", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "0d075fb2-adaa-451e-9068-f3e8c0e87993", "url": "https://bsky.app/profile/threatint.eu/post/3m3n4x752yd27"}, {"timestamp": "2025-10-20T16:19:13.361Z", "date_only": false, "value": "2025-10-20T16:19:13.361885Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4950882", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "5d505c74-5c84-4670-a9b7-cbe601c16263", "url": "https://feedsin.space/feed/CISAKevBot/items/4950882"}, {"timestamp": "2025-10-21T03:55:14.273Z", "date_only": false, "value": "2025-10-21T03:55:14.273868Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2747", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-21T03:55:14.273Z", "date_only": false, "value": "2025-10-21T03:55:14.273868Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2747", "record": "FKIE_CVE-2025-2747", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-10-21T21:02:35.426Z", "date_only": false, "value": "2025-10-21T21:02:35.426985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bjo7g2g", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "d0683f70-c483-4f8d-8041-d287bf0368e5", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bjo7g2g"}, {"timestamp": "2025-10-22T12:02:06Z", "date_only": false, "value": "2025-10-22T12:02:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "e82652cf-029e-460b-9786-4756c26af9f5"}, {"timestamp": "2025-10-25T21:02:28.547Z", "date_only": false, "value": "2025-10-25T21:02:28.547405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwf4b32e", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "3d9d0eee-3ab0-483b-836a-2d0cf55c69a4", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwf4b32e"}, {"timestamp": "2025-11-05T00:31:18Z", "date_only": false, "value": "2025-11-05T00:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8345-RFQ2-7H8Q", "record": "GHSA-8345-RFQ2-7H8Q", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": true, "value": "2025-11-10", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "evidence.0.details.due_date", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-17T19:32:55.200Z", "date_only": false, "value": "2025-12-17T19:32:55.200Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-2747", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": true, "value": "2026-01-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-05135", "record": "CNVD-2026-05135", "field": "openTime", "linked_record": true}, {"timestamp": "2026-02-02T12:25:48.740Z", "date_only": false, "value": "2026-02-02T12:25:48.740998Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "1460c6d9-c104-4d89-9714-20715400f76f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T19:09:15.890Z", "date_only": false, "value": "2026-02-26T19:09:15.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:15.890Z", "date_only": false, "value": "2026-02-26T19:09:15.890Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2747", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-21T05:21:24Z", "date_only": false, "value": "2026-04-21T05:21:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "3d4f1e80-f1a2-4a4c-b81f-e4f56cd1af46", "url": "https://ccb.belgium.be/advisories/warning-multiple-critical-high-vulnerabilities-kentico-xperience-can-lead-remote-code"}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "08733224-0dd4-40dd-9393-8e6340b3b250", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-2747", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "08733224-0dd4-40dd-9393-8e6340b3b250", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30Z", "date_only": false, "value": "2026-06-01T10:42:30+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-2747", "field": "status.status_updated_at", "uuid": "08733224-0dd4-40dd-9393-8e6340b3b250", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:30.542Z", "date_only": false, "value": "2026-06-01T10:42:30.542Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-2747", "field": "evidence.0.details.added_date", "uuid": "08733224-0dd4-40dd-9393-8e6340b3b250", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:07:33.210Z", "date_only": false, "value": "2026-06-17T09:07:33.210", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2747", "record": "FKIE_CVE-2025-2747", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:45:23.556Z", "date_only": false, "value": "2026-06-19T12:45:23.556604Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0692d1da-f584-47d0-a25b-17f110f730b2", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "e466e33e-a63f-4eb2-bbbd-29042830a8ae", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0692d1da-f584-47d0-a25b-17f110f730b2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-2747", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "08733224-0dd4-40dd-9393-8e6340b3b250", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:48.989Z", "date_only": false, "value": "2026-06-23T14:03:48.989773Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08733224-0dd4-40dd-9393-8e6340b3b250", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "513a4468-7e6f-4b24-8808-ffc6abe996de", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/08733224-0dd4-40dd-9393-8e6340b3b250", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T05:00:04.846Z", "date_only": false, "value": "2026-09-22T05:00:04.846629Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/138", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "ad330398-c7dc-4989-8be3-e8824bb0becc", "content": "MOXA COMPANY IN TAIWAN \ud83c\uddf9\ud83c\uddfc \n\nTARGET : https://www.moxa.com/\n\n[ CRITICAL > CVE-2025-2746 ]\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-2746\n\n[ CRITICAL > CVE-2025-2747 ]\nhttps://www.cve.org/CVERecord?id=CVE-2025-2747\n\n[ MEDIUM > CVE-2025-2748 ]\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-2748\n\nDatabase = Failed, WAF Updated...\n\n#NoHeartz #CVE", "url": "https://t.me/Noheartz1337/138"}, {"timestamp": "2026-09-22T05:00:05.230Z", "date_only": false, "value": "2026-09-22T05:00:05.230895Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/129", "record": "CVE-2025-2747", "field": "creation_timestamp", "uuid": "5170a2c1-7b4e-491d-82d0-b4f2e75e6620", "content": "Hmmm \ud83e\udd14\n\n[ CVE-2025-2746 ]\n[ CVE-2025-2747 ]\n[ CVE-2025-2748 ]\n\n#NoHeartz", "url": "https://t.me/Noheartz1337/129"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-12T18:57:38.422Z", "anchors": {"origin": {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 18078173.921, "hours": 5021.714978055556, "days": 209.23812408564814, "min_seconds": 18078173.921, "max_seconds": 18164573.921, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 18078173.921, "hours": 5021.714978055556, "days": 209.23812408564814, "min_seconds": 18078173.921, "max_seconds": 18164573.921, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51669632.343699, "hours": 14352.6756510275, "days": 598.0281521261459, "min_seconds": 51669632.343699, "max_seconds": 51669632.343699, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:17:06.079Z", "date_only": false, "value": "2025-03-24T18:17:06.079Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2747", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T18:57:38.422Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 33591458.422699, "hours": 9330.960672971943, "days": 388.79002804049765, "min_seconds": 33505058.422699, "max_seconds": 33591458.422699, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-2747", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "09cc78e6-cce2-46dc-a0f3-eabb728f91e4", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-12T18:57:38.422Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}