https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 09 May 2026 00:04:29 +0000 https://vulnerability.circl.lu/sighting/b9a48f24-7c07-413c-b442-d2d7d3e801db/export {"uuid": "b9a48f24-7c07-413c-b442-d2d7d3e801db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45843", "type": "seen", "source": "https://t.me/cvedetector/24832", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45843 - TOTOLINK NR1800X Router Authenticated Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45843 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:38.000000Z"} {"uuid": "b9a48f24-7c07-413c-b442-d2d7d3e801db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45843", "type": "seen", "source": "https://t.me/cvedetector/24832", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45843 - TOTOLINK NR1800X Router Authenticated Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45843 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:38.000000Z"} https://vulnerability.circl.lu/sighting/b9a48f24-7c07-413c-b442-d2d7d3e801db/export Thu, 08 May 2025 20:07:38 +0000 https://vulnerability.circl.lu/sighting/f6101a30-01ca-4c0e-ad94-bbe46602490c/export {"uuid": "f6101a30-01ca-4c0e-ad94-bbe46602490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "seen", "source": "https://t.me/cvedetector/24833", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45844 - TOTOLINK NR1800X Router Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45844 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:39.000000Z"} {"uuid": "f6101a30-01ca-4c0e-ad94-bbe46602490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "seen", "source": "https://t.me/cvedetector/24833", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45844 - TOTOLINK NR1800X Router Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45844 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:39.000000Z"} https://vulnerability.circl.lu/sighting/f6101a30-01ca-4c0e-ad94-bbe46602490c/export Thu, 08 May 2025 20:07:39 +0000 https://vulnerability.circl.lu/sighting/012bea69-4a03-4fae-91f5-0d4a512554ae/export {"uuid": "012bea69-4a03-4fae-91f5-0d4a512554ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "seen", "source": "https://t.me/cvedetector/24834", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45845 - TOTOLINK NR1800X Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45845 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:40.000000Z"} {"uuid": "012bea69-4a03-4fae-91f5-0d4a512554ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "seen", "source": "https://t.me/cvedetector/24834", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45845 - TOTOLINK NR1800X Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45845 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:40.000000Z"} https://vulnerability.circl.lu/sighting/012bea69-4a03-4fae-91f5-0d4a512554ae/export Thu, 08 May 2025 20:07:40 +0000 https://vulnerability.circl.lu/sighting/0df800c8-dc2d-4064-b5df-ed839dcf2298/export {"uuid": "0df800c8-dc2d-4064-b5df-ed839dcf2298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "seen", "source": "https://t.me/cvedetector/24835", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45846 - ALFA AIP-W512 Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45846 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:41.000000Z"} {"uuid": "0df800c8-dc2d-4064-b5df-ed839dcf2298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "seen", "source": "https://t.me/cvedetector/24835", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-45846 - ALFA AIP-W512 Stack Overflow Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-45846 \nPublished : May 8, 2025, 4:15 p.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T20:07:41.000000Z"} https://vulnerability.circl.lu/sighting/0df800c8-dc2d-4064-b5df-ed839dcf2298/export Thu, 08 May 2025 20:07:41 +0000 https://vulnerability.circl.lu/sighting/1e97b643-c900-4665-aa63-da8db885f34c/export {"uuid": "1e97b643-c900-4665-aa63-da8db885f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45841", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45841\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:39:03.700Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/regainer27/CVE-key/blob/main/bo1/README.md\n3. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html", "creation_timestamp": "2025-05-12T19:29:24.000000Z"} {"uuid": "1e97b643-c900-4665-aa63-da8db885f34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45841", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45841\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:39:03.700Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/regainer27/CVE-key/blob/main/bo1/README.md\n3. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html", "creation_timestamp": "2025-05-12T19:29:24.000000Z"} https://vulnerability.circl.lu/sighting/1e97b643-c900-4665-aa63-da8db885f34c/export Mon, 12 May 2025 19:29:24 +0000 https://vulnerability.circl.lu/sighting/6244f597-bbd5-46cf-85e6-257aa13a3465/export {"uuid": "6244f597-bbd5-46cf-85e6-257aa13a3465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45847", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45847\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:32:32.034Z\n\ud83d\udd17 References:\n1. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512\n2. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo1", "creation_timestamp": "2025-05-12T19:29:25.000000Z"} {"uuid": "6244f597-bbd5-46cf-85e6-257aa13a3465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45847", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45847\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-12T18:32:32.034Z\n\ud83d\udd17 References:\n1. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512\n2. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo1", "creation_timestamp": "2025-05-12T19:29:25.000000Z"} https://vulnerability.circl.lu/sighting/6244f597-bbd5-46cf-85e6-257aa13a3465/export Mon, 12 May 2025 19:29:25 +0000 https://vulnerability.circl.lu/sighting/1f1dc4f2-7881-4659-816e-71792dc03f87/export {"uuid": "1f1dc4f2-7881-4659-816e-71792dc03f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45846\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:26:30.168Z\n\ud83d\udd17 References:\n1. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo4\n2. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512", "creation_timestamp": "2025-05-13T14:30:37.000000Z"} {"uuid": "1f1dc4f2-7881-4659-816e-71792dc03f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16117", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45846\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:26:30.168Z\n\ud83d\udd17 References:\n1. https://github.com/regainer27/CVE-key/tree/main/ALFA/AIP%20W512/bo4\n2. https://files.alfa.com.tw/?dir=%5B2%5D%20WiFi%20Home%20Router/AIP-W512", "creation_timestamp": "2025-05-13T14:30:37.000000Z"} https://vulnerability.circl.lu/sighting/1f1dc4f2-7881-4659-816e-71792dc03f87/export Tue, 13 May 2025 14:30:37 +0000 https://vulnerability.circl.lu/sighting/ea473742-eaca-46d0-802d-382e9059029a/export {"uuid": "ea473742-eaca-46d0-802d-382e9059029a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45845\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:24:54.180Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo5", "creation_timestamp": "2025-05-13T14:30:39.000000Z"} {"uuid": "ea473742-eaca-46d0-802d-382e9059029a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45845\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:24:54.180Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo5", "creation_timestamp": "2025-05-13T14:30:39.000000Z"} https://vulnerability.circl.lu/sighting/ea473742-eaca-46d0-802d-382e9059029a/export Tue, 13 May 2025 14:30:39 +0000 https://vulnerability.circl.lu/sighting/e4a0adb8-978c-44df-8f98-37fad9ade48d/export {"uuid": "e4a0adb8-978c-44df-8f98-37fad9ade48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:13:51.793Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo6", "creation_timestamp": "2025-05-13T14:30:44.000000Z"} {"uuid": "e4a0adb8-978c-44df-8f98-37fad9ade48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.\n\ud83d\udccf Published: 2025-05-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-13T14:13:51.793Z\n\ud83d\udd17 References:\n1. https://www.totolink.net\n2. https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/225/ids/36.html\n3. https://github.com/regainer27/CVE-key/tree/main/bo6", "creation_timestamp": "2025-05-13T14:30:44.000000Z"} https://vulnerability.circl.lu/sighting/e4a0adb8-978c-44df-8f98-37fad9ade48d/export Tue, 13 May 2025 14:30:44 +0000 https://vulnerability.circl.lu/sighting/51d64f9b-3756-431a-9c4a-f6022aa4f55c/export {"uuid": "51d64f9b-3756-431a-9c4a-f6022aa4f55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4584\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-13T01:47:46.977Z\n\ud83d\udccf Modified: 2025-06-13T01:47:46.977Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3895df7a-9f24-45a5-b447-16f214cfbfcc?source=cve\n2. https://plugins.trac.wordpress.org/browser/irm-newsroom/trunk/irm-newsroom.php#L494", "creation_timestamp": "2025-06-13T02:34:13.000000Z"} {"uuid": "51d64f9b-3756-431a-9c4a-f6022aa4f55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4584\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' shortcode in all versions up to, and including, 1.2.17 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-13T01:47:46.977Z\n\ud83d\udccf Modified: 2025-06-13T01:47:46.977Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3895df7a-9f24-45a5-b447-16f214cfbfcc?source=cve\n2. https://plugins.trac.wordpress.org/browser/irm-newsroom/trunk/irm-newsroom.php#L494", "creation_timestamp": "2025-06-13T02:34:13.000000Z"} https://vulnerability.circl.lu/sighting/51d64f9b-3756-431a-9c4a-f6022aa4f55c/export Fri, 13 Jun 2025 02:34:13 +0000