{"metadata": {"vulnerability": "CVE-2025-52488", "count": 39, "kinds": {"milestone": 4, "sighting": 16, "kev": 11, "other": 8}}, "data": [{"timestamp": "2025-06-17T02:28:39.718Z", "date_only": false, "value": "2025-06-17T02:28:39.718Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-52488", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-21T02:51:25.252Z", "date_only": false, "value": "2025-06-21T02:51:25.252Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-52488", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-21T02:51:25.252Z", "date_only": false, "value": "2025-06-21T02:51:25.252Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-52488", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-21T03:15:24Z", "date_only": false, "value": "2025-06-21T03:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-21T03:15:24.817Z", "date_only": false, "value": "2025-06-21T03:15:24.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52488", "record": "FKIE_CVE-2025-52488", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-21T03:45:46Z", "date_only": false, "value": "2025-06-21T03:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19102", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "5767c93d-8cd1-4969-bb02-db5ee1e49b0b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52488\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n\ud83d\udccf Published: 2025-06-21T02:51:25.252Z\n\ud83d\udccf Modified: 2025-06-21T02:51:25.252Z\n\ud83d\udd17 References:\n1. https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-mgfv-2362-jq96", "url": "https://t.me/DarkWebInformer_CVEAlerts/19102", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-21T04:03:09Z", "date_only": false, "value": "2025-06-21T04:03:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Wkmo48b48G0HhmpT1hoWuZ2qGdeD3nRgP5J0NW5LvqYONP0", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "550cb90c-d013-42a0-bb97-f68f7471b961", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-21T06:29:51.363Z", "date_only": false, "value": "2025-06-21T06:29:51.363517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls3whljh4j2v", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "3d651683-8fe8-409a-a0e1-418d491c2d47", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls3whljh4j2v"}, {"timestamp": "2025-06-23T17:47:13.679Z", "date_only": false, "value": "2025-06-23T17:47:13.679819Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-52488", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-23T17:47:13.679Z", "date_only": false, "value": "2025-06-23T17:47:13.679819Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52488", "record": "FKIE_CVE-2025-52488", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-23T17:47:24.661Z", "date_only": false, "value": "2025-06-23T17:47:24.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-52488", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-23T17:47:24.661Z", "date_only": false, "value": "2025-06-23T17:47:24.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-52488", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T22:53:21Z", "date_only": false, "value": "2025-06-27T22:53:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "modified"}, {"timestamp": "2025-07-08T09:08:43.767Z", "date_only": false, "value": "2025-07-08T09:08:43.767464Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ltgxbd6i672y", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "0b8d0be5-0dfa-444e-8dc3-fd5546d155fd", "url": "https://bsky.app/profile/undercode.bsky.social/post/3ltgxbd6i672y"}, {"timestamp": "2025-07-08T11:07:04.790Z", "date_only": false, "value": "2025-07-08T11:07:04.790066Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114817290958190100", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "f047fbcd-de81-4ddd-b3b3-ef8e4e9394dd", "url": "https://infosec.exchange/users/dragonjar/statuses/114817290958190100"}, {"timestamp": "2025-07-08T13:54:05.980Z", "date_only": false, "value": "2025-07-08T13:54:05.980673Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lthh7mb6gr2c", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "f914aa1e-bef0-40c5-9eb3-9ba3f7cf2eb7", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lthh7mb6gr2c"}, {"timestamp": "2025-07-13T13:49:45Z", "date_only": false, "value": "2025-07-13T13:49:45.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-52488.yaml", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "d8c08076-b577-41c8-89b2-57c89ea8e022", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-52488.yaml"}, {"timestamp": "2025-07-14T09:00:05Z", "date_only": false, "value": "2025-07-14T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jMiaAfR2J9C34xHnElOO8QMQNpsrJcxgBx1v7Waf8IgPpW8", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "8ee9892e-f31b-4846-9474-efb3073b1f23", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-14T15:00:12Z", "date_only": false, "value": "2025-07-14T15:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6Txp-NdsgOvnDudD50x-c9VhpDrhwlYTuOYafPDdoFYGJ9g", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "2dcc7bbf-4534-462f-bfec-afb1edd3c8ae", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-14T21:00:04Z", "date_only": false, "value": "2025-07-14T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uWnpZChKZV5yuE-QOEkc-gVigY28ff3y_u3cMKv3pSLH4Sk", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "5910cebd-2036-4b4c-8afe-c3bbbec83e64", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-14T21:02:23.493Z", "date_only": false, "value": "2025-07-14T21:02:23.493575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltxbwwfth42q", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "6c2767d4-3721-4a13-9c38-4175129d3b33", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltxbwwfth42q"}, {"timestamp": "2025-07-24T21:02:27.687Z", "date_only": false, "value": "2025-07-24T21:02:27.687130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5qt4y23", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "2fa6362c-f32d-4da3-98c3-93ebed44003e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5qt4y23"}, {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-52488", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-52488", "field": "evidence.0.details.added_date", "uuid": "cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "88626b44-962f-46da-96ce-86343485e1a6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-52488", "field": "status.status_updated_at", "uuid": "cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:36:35.260Z", "date_only": false, "value": "2026-06-17T09:36:35.260", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-52488", "record": "FKIE_CVE-2025-52488", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:54.269Z", "date_only": false, "value": "2026-06-19T12:45:54.269878Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/824b970d-2106-4a42-bdab-04b2ebaf8030", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "978a423a-2c25-4ff2-8b83-a19620d82bac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/824b970d-2106-4a42-bdab-04b2ebaf8030", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-52488", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:19.188Z", "date_only": false, "value": "2026-06-23T14:03:19.188198Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "9c2aa84a-2fe9-49ea-8665-910bc519e324", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbcc28b3-dbb8-4a4a-8e3c-888637a05e39", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:56.909Z", "date_only": false, "value": "2026-06-30T09:23:56.909520Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dcd4c9a2-b36f-4991-9b56-75ac493c6923", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "36be4ec1-5713-4b95-9150-5c22c23bb444", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dcd4c9a2-b36f-4991-9b56-75ac493c6923", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.last_seen_at", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": true, "value": "2026-07-16", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-52488", "field": "evidence.0.details.observation_date", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-52488", "field": "status.status_updated_at", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-18T01:00:01Z", "date_only": false, "value": "2026-07-18T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-10-31T18:04:10.968Z", "anchors": {"origin": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-21T03:45:46Z", "date_only": false, "value": "2025-06-21T03:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19102", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "5767c93d-8cd1-4969-bb02-db5ee1e49b0b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52488\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n\ud83d\udccf Published: 2025-06-21T02:51:25.252Z\n\ud83d\udccf Modified: 2025-06-21T02:51:25.252Z\n\ud83d\udd17 References:\n1. https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-mgfv-2362-jq96", "url": "https://t.me/DarkWebInformer_CVEAlerts/19102", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 3541488.0, "hours": 983.7466666666667, "days": 40.989444444444445, "min_seconds": 3541488.0, "max_seconds": 3541488.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 3541488.0, "hours": 983.7466666666667, "days": 40.989444444444445, "min_seconds": 3541488.0, "max_seconds": 3541488.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 44441.0, "hours": 12.344722222222222, "days": 0.5143634259259259, "min_seconds": 44441.0, "max_seconds": 44441.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-21T03:45:46Z", "date_only": false, "value": "2025-06-21T03:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19102", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "5767c93d-8cd1-4969-bb02-db5ee1e49b0b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52488\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n\ud83d\udccf Published: 2025-06-21T02:51:25.252Z\n\ud83d\udccf Modified: 2025-06-21T02:51:25.252Z\n\ud83d\udd17 References:\n1. https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-mgfv-2362-jq96", "url": "https://t.me/DarkWebInformer_CVEAlerts/19102", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 43036745.96862, "hours": 11954.65165795, "days": 498.1104857479167, "min_seconds": 43036745.96862, "max_seconds": 43036745.96862, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T15:25:05Z", "date_only": false, "value": "2025-06-20T15:25:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGFV-2362-JQ96", "record": "GHSA-MGFV-2362-JQ96", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T18:04:10.968Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 39495257.96862, "hours": 10970.904991283334, "days": 457.1210413034722, "min_seconds": 39495257.96862, "max_seconds": 39495257.96862, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-07-31T15:09:53Z", "date_only": false, "value": "2025-07-31T15:09:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-52488", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "dcd4c9a2-b36f-4991-9b56-75ac493c6923", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-31T18:04:10.968Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 42992304.96862, "hours": 11942.306935727778, "days": 497.5961223219908, "min_seconds": 42992304.96862, "max_seconds": 42992304.96862, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-21T03:45:46Z", "date_only": false, "value": "2025-06-21T03:45:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19102", "record": "CVE-2025-52488", "field": "creation_timestamp", "uuid": "5767c93d-8cd1-4969-bb02-db5ee1e49b0b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-52488\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been patched in version 10.0.1.\n\ud83d\udccf Published: 2025-06-21T02:51:25.252Z\n\ud83d\udccf Modified: 2025-06-21T02:51:25.252Z\n\ud83d\udd17 References:\n1. https://github.com/dnnsoftware/Dnn.Platform/security/advisories/GHSA-mgfv-2362-jq96", "url": "https://t.me/DarkWebInformer_CVEAlerts/19102", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T18:04:10.968Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}