{"vulnerability": "CVE-2025-34101", "sightings": [{"uuid": "a9463c43-1b54-4ad8-92ec-6b24b7eda42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltpqk64um223", "content": "", "creation_timestamp": "2025-07-11T21:02:21.900631Z"}, {"uuid": "58c11e85-c768-4701-9e99-4c94f98a3912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "9bd8dc46-dc51-4f31-a9aa-50ab75b28f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "240e5cb5-a1e4-4106-9309-615cfa52c464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Gjoko Krstic(LiquidWorm) \", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote command execution vulnerability\\n          in the console component of Serviio Media Server versions 1.4 to 1.8 on\\n          Windows operating systems.\\n\\n          The console service (on port 23423 by default) exposes a REST API which\\n          which does not require authentication.\\n\\n          The 'action' API endpoint does not sufficiently sanitize user-supplied data\\n          in the 'VIDEO' parameter of the 'checkStreamUrl' method. This parameter is\\n          used in a call to cmd.exe resulting in execution of arbitrary commands.\\n\\n          This module has been tested successfully on Serviio Media Server versions\\n          1.4.0, 1.5.0, 1.6.0 and 1.8.0 on Windows 7.\", \"disclosure_date\": \"2017-05-03\", \"fullname\": \"exploit/windows/http/serviio_checkstreamurl_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Serviio Media Server checkStreamUrl Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/serviio_checkstreamurl_cmd_exec\", \"references\": [\"CVE-2025-34101\", \"OSVDB-41961\", \"PACKETSTORM-142387\", \"URL-http://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5408.php\", \"URL-https://blogs.securiteam.com/index.php/archives/3094\"], \"rport\": 23423, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:58.229945Z"}]}