{"metadata": {"vulnerability": "cve-2025-34045", "count": 41, "kinds": {"milestone": 4, "sighting": 18, "kev": 11, "other": 8}}, "data": [{"timestamp": "2025-04-15T19:15:22.547Z", "date_only": false, "value": "2025-04-15T19:15:22.547Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-34045", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-26T15:51:37.884Z", "date_only": false, "value": "2025-06-26T15:51:37.884Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-34045", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-26T16:15:27Z", "date_only": false, "value": "2025-06-26T16:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R2VV-R3XX-X6MH", "record": "GHSA-R2VV-R3XX-X6MH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-26T16:15:27.830Z", "date_only": false, "value": "2025-06-26T16:15:27.830", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34045", "record": "FKIE_CVE-2025-34045", "field": "published"}, {"timestamp": "2025-06-26T16:51:50Z", "date_only": false, "value": "2025-06-26T16:51:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19632", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "7184879d-417d-4e88-b6e0-ded7aeb3c055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34045\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code.\n\ud83d\udccf Published: 2025-06-26T15:51:37.884Z\n\ud83d\udccf Modified: 2025-06-26T15:51:37.884Z\n\ud83d\udd17 References:\n1. https://www.cnvd.org.cn/flaw/show/CNVD-2020-68596\n2. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2020/CNVD-2020-68596.yaml\n3. https://vulncheck.com/advisories/weiphp-path-traversal-file-read", "url": "https://t.me/DarkWebInformer_CVEAlerts/19632"}, {"timestamp": "2025-06-26T18:31:27Z", "date_only": false, "value": "2025-06-26T18:31:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R2VV-R3XX-X6MH", "record": "GHSA-R2VV-R3XX-X6MH", "field": "published"}, {"timestamp": "2025-06-27T13:33:15.340Z", "date_only": false, "value": "2025-06-27T13:33:15.340842Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-34045", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-27T13:33:15.340Z", "date_only": false, "value": "2025-06-27T13:33:15.340842Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34045", "record": "FKIE_CVE-2025-34045", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-27T13:33:23.110Z", "date_only": false, "value": "2025-06-27T13:33:23.110Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-34045", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-27T21:02:22.050Z", "date_only": false, "value": "2025-06-27T21:02:22.050787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjz7x5jv24", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "899b60e5-361c-4f25-b4c2-7fe3ddbd4217", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjz7x5jv24"}, {"timestamp": "2025-09-23T21:30:54Z", "date_only": false, "value": "2025-09-23T21:30:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R2VV-R3XX-X6MH", "record": "GHSA-R2VV-R3XX-X6MH", "field": "modified"}, {"timestamp": "2025-10-31T21:02:50.636Z", "date_only": false, "value": "2025-10-31T21:02:50.636624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernoyd523", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "625ca3a4-f6c2-4e95-8b8a-81da1b42c167", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernoyd523"}, {"timestamp": "2025-11-29T15:25:58.494Z", "date_only": false, "value": "2025-11-29T15:25:58.494Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-34045", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-29T15:25:58.494Z", "date_only": false, "value": "2025-11-29T15:25:58.494Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2025-34045", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-18T08:20:47Z", "date_only": false, "value": "2026-01-18T08:20:47+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-34045", "field": "timestamps.asserted_at", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-18T08:20:47Z", "date_only": false, "value": "2026-01-18T08:20:47+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34045", "field": "timestamps.first_seen_at", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-34045", "field": "timestamps.asserted_at", "uuid": "339f4e2c-0db2-4c67-b42f-2638b849e8b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-34045", "field": "evidence.0.details.added_date", "uuid": "339f4e2c-0db2-4c67-b42f-2638b849e8b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "f47012d1-aec0-4edf-b4b9-2feaa3bbccd4"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-34045", "field": "timestamps.first_seen_at", "uuid": "339f4e2c-0db2-4c67-b42f-2638b849e8b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-34045", "field": "status.status_updated_at", "uuid": "339f4e2c-0db2-4c67-b42f-2638b849e8b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-12T00:00:00Z", "date_only": false, "value": "2026-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "86ce5684-0d7f-4daf-b3d5-7b0907767c81"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "69ff3322-6603-4086-9ac2-91252635e7b7"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "3e87c038-8235-484f-b05e-16c656c0128c"}, {"timestamp": "2026-03-28T00:00:00Z", "date_only": false, "value": "2026-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-28)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "deae611f-8b25-4c37-a21c-5a9a8a4b2edb"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "a945ead4-7c79-412b-a19b-a7b6dddb9b1d"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "6bebc679-32b8-4f46-b896-c4a24ce59a1f"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "84aa3c93-c921-4587-8b06-e0c428b2f706"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "69bde173-403d-4a06-b03a-d51f3ba8447f"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "b18ae7e2-ade7-4359-a83d-0fbf6b178e47"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "50bea1ff-297b-460f-ad7e-d1846fae3870"}, {"timestamp": "2026-06-17T09:13:22.263Z", "date_only": false, "value": "2026-06-17T09:13:22.263", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34045", "record": "FKIE_CVE-2025-34045", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:41.444Z", "date_only": false, "value": "2026-06-19T12:45:41.444804Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81b50c8d-d3c7-4dfe-8526-b6e8d6fac5e3", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "b45a96ef-35b0-48b8-8cd5-654bf5d3f4b0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81b50c8d-d3c7-4dfe-8526-b6e8d6fac5e3"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-34045", "field": "timestamps.recorded_at", "uuid": "339f4e2c-0db2-4c67-b42f-2638b849e8b9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:09.695Z", "date_only": false, "value": "2026-06-23T14:03:09.695861Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/339f4e2c-0db2-4c67-b42f-2638b849e8b9", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "9f12d0e4-87fc-4a67-961b-1199e63b73e5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/339f4e2c-0db2-4c67-b42f-2638b849e8b9"}, {"timestamp": "2026-06-30T09:23:54.083Z", "date_only": false, "value": "2026-06-30T09:23:54.083402Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ade6c5b-1f6d-4406-921e-9d673207b20d", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "32b56a60-6a66-4b25-8f21-3672e1d2c8db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ade6c5b-1f6d-4406-921e-9d673207b20d"}, {"timestamp": "2026-06-30T10:00:07.355Z", "date_only": false, "value": "2026-06-30T10:00:07.355649Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2025-34045", "field": "creation_timestamp", "uuid": "d83291cf-f0af-4b3f-a34e-39235a47b018"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-34045", "field": "timestamps.last_seen_at", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-34045", "field": "evidence.0.details.observation_date", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-34045", "field": "status.status_updated_at", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-34045", "field": "timestamps.recorded_at", "uuid": "2ade6c5b-1f6d-4406-921e-9d673207b20d", "status": {"status_reason": "confirmed", "exploited": true}}]}