{"vulnerability": "CVE-2025-6360", "sightings": [{"uuid": "648a42ec-5836-4b0e-beda-f535e5c1cf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls33ihfict2r", "content": "", "creation_timestamp": "2025-06-20T22:27:09.674037Z"}, {"uuid": "a24b1950-49f6-4bf1-9e92-ef9f72ac26c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4vlxutnoa26", "content": "", "creation_timestamp": "2025-11-05T17:43:16.316986Z"}, {"uuid": "00487582-1e00-435b-ac48-86087a277db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4gd2uslzn2s", "content": "", "creation_timestamp": "2025-10-30T15:53:57.093444Z"}, {"uuid": "eefd111a-1bbc-4eb4-82a8-95a61df8686e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5waqgokr62k", "content": "", "creation_timestamp": "2025-11-18T17:20:06.867082Z"}, {"uuid": "010182ec-025b-433b-b0cb-82d9514480c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5wb76gabm2u", "content": "", "creation_timestamp": "2025-11-18T17:28:21.212689Z"}, {"uuid": "e9dd0200-a38b-4558-af2b-0f420e3c96d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5wbtjysco2s", "content": "", "creation_timestamp": "2025-11-18T17:39:44.648601Z"}, {"uuid": "960b0650-9422-4437-86c0-65e91874d3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63601", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3m4x5zgpzkk2p", "content": "", "creation_timestamp": "2025-11-06T08:38:58.200709Z"}, {"uuid": "d193133a-b2fe-426c-9cca-ba45c5b34ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63602", "type": "published-proof-of-concept", "source": "Telegram/jpwr_mxY2BSwpywkww_3AdCk5uVd9pSvTsSoTpdMeZx8lsI", "content": "", "creation_timestamp": "2025-11-14T09:00:08.000000Z"}, {"uuid": "8d4d7a33-461f-47db-a9e3-0be1733718e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63602", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/59678", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDisclosure for CVE-2025-63602, including a PoC for use of an insecure driver in Awesome Miner 11.2.4 leading to arbitrary kernel read/write to MSRs, resulting in kernel code execution.\nURL\uff1ahttps://github.com/D7EAD/CVE-2025-63602\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-14T02:25:32.000000Z"}, {"uuid": "96b8e89f-6eb2-4f4d-a1c4-e4c8159b1dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6360", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6360\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in code-projects Simple Pizza Ordering System 1.0. This affects an unknown part of the file /portal.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-20T19:00:14.786Z\n\ud83d\udccf Modified: 2025-06-20T20:12:34.976Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.313353\n2. https://vuldb.com/?ctiid.313353\n3. https://vuldb.com/?submit.597301\n4. https://github.com/rom4j/cve/issues/10\n5. https://code-projects.org/", "creation_timestamp": "2025-06-20T20:44:22.000000Z"}, {"uuid": "bfcc77e1-0e15-4e35-a558-4048b1ccfd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63607", "type": "seen", "source": "https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583", "content": "# Reflected Cross-Site Scripting (XSS) in TechStore \u2014 CVE-2025-63607\n\n**Discoverer:** Mohammed ElKhateb (HoRRus)\n**CVE ID:** CVE-2025-63607 *(MITRE-reserved at time of writing)*\n**CWE:** [CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')](https://cwe.mitre.org/data/definitions/79.html)\n**Affected Product:** [nooncarlett/TechStore](https://github.com/nooncarlett/TechStore) v1.0\n**Affected Component:** `contact_display` request handler\n\n---\n\n## Summary\n\nThe `TechStore` web application (v1.0) contains a reflected Cross-Site Scripting (XSS) vulnerability in its `contact_display` endpoint. The application echoes the `id` query parameter verbatim into the rendered HTML response without any output encoding or server-side validation, allowing an attacker to inject and execute arbitrary JavaScript in the context of a victim's browser session.\n\n## Vulnerability Details\n\nThe `contact_display` handler builds its HTML response by directly interpolating the value of the `id` GET parameter into the page without escaping it for the HTML context. Because there is no whitelist validation (e.g., enforcing a numeric-only `id`) and no HTML-context output encoding, any HTML/JavaScript markup supplied in `id` is reflected back and rendered by the browser as part of the page.\n\n**Vulnerable parameter:** `id` (GET)\n**Sink:** Unescaped interpolation into the HTML response body\n\n## Proof of Concept\n\n1. Clone the repository locally:\n   ```\n   git clone https://github.com/nooncarlett/TechStore\n   ```\n2. Install the project's requirements as documented in the repository.\n3. Run the application:\n   ```\n   python app.py\n   ```\n4. In a browser, navigate to:\n   ```\n   http://127.0.0.1:5001/contact_display?id=1alert('XSS POPUP')\n   ```\n5. The injected `` executes and the `alert('XSS POPUP')` dialog fires, confirming the reflected XSS.\n\n## Attack Scenario\n\nBecause the payload is delivered entirely via a GET request, an attacker can weaponize it as a simple link:\n\n```\nhttp:///contact_display?id=1...attacker JS...\n```\n\nThis link can be distributed via phishing email, chat, or social media. When a victim who is logged into the application opens the link, the attacker's script executes in the victim's browser session, with the same access as the victim \u2014 enabling session/cookie theft, unauthorized actions performed as the victim, or delivery of further malicious payloads (e.g., redirects, credential-harvesting overlays).\n\n## Impact\n\n- **Confidentiality:** Disclosure of session tokens / sensitive in-page data reachable by script.\n- **Integrity:** Ability to perform actions as the authenticated victim (e.g., form submissions) via injected script.\n- **Availability:** Not directly impacted.\n\n**Suggested CVSS v3.1 vector (self-assessed):**\n`AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N` \u2014 **Base Score: 6.1 (Medium)**\n\n*(Attack Vector: Network, Attack Complexity: Low, Privileges Required: None, User Interaction: Required, Scope: Unchanged, Confidentiality: Low, Integrity: Low, Availability: None)*\n\n## Remediation\n\n- Apply context-aware output encoding to any user-controllable value rendered into HTML (e.g., HTML-entity encode `id` before interpolation).\n- Validate/whitelist the `id` parameter server-side (e.g., enforce it is numeric before use).\n- Deploy a restrictive Content-Security-Policy (CSP) to reduce the impact of any residual injection points (e.g., disallow inline `` execution).\n\n## Disclosure Timeline\n\n- Vulnerability discovered and reported to MITRE's CVE Assignment Team (CNA of Last Resort) for the affected open-source project.\n- CVE-2025-63607 reserved and confirmed via official MITRE assignment email.\n- Public write-up published by the discoverer to support record publication.\n\n## References\n\n- [CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')](https://cwe.mitre.org/data/definitions/79.html)\n- [OWASP Cross Site Scripting Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html)\n- [MDN: Cross-site scripting (XSS)](https://developer.mozilla.org/en-US/docs/Web/Security/Cross-site_scripting_(XSS))\n- [Affected repository: nooncarlett/TechStore](https://github.com/nooncarlett/TechStore)\n- [CVE Record (pending publication): CVE-2025-63607](https://www.cve.org/CVERecord?id=CVE-2025-63607)\n\n---\n\n*Reported and documented by Mohammed ElKhateb ([HoRRus](https://horrus-offsec.com/)) \u2014 [LinkedIn](https://www.linkedin.com/in/mohammed-elkhateb-horrus) \u00b7 [Hack The Box](https://app.hackthebox.com/users/1506676)*\n", "creation_timestamp": "2026-08-28T22:31:17.253203Z"}, {"uuid": "45b45ec8-3d76-408e-96cb-0c5f7dec4d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-63607", "type": "seen", "source": "https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583", "content": "# Reflected Cross-Site Scripting (XSS) in TechStore \u2014 CVE-2025-63607\n\n**Discoverer:** Mohammed ElKhateb (HoRRus)\n**CVE ID:** CVE-2025-63607 *(MITRE-reserved at time of writing)*\n**CWE:** [CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')](https://cwe.mitre.org/data/definitions/79.html)\n**Affected Product:** [nooncarlett/TechStore](https://github.com/nooncarlett/TechStore) v1.0\n**Affected Component:** `contact_display` request handler\n\n---\n\n## Summary\n\nThe `TechStore` web application (v1.0) contains a reflected Cross-Site Scripting (XSS) vulnerability in its `contact_display` endpoint. The application echoes the `id` query parameter verbatim into the rendered HTML response without any output encoding or server-side validation, allowing an attacker to inject and execute arbitrary JavaScript in the context of a victim's browser session.\n\n## Vulnerability Details\n\nThe `contact_display` handler builds its HTML response by directly interpolating the value of the `id` GET parameter into the page without escaping it for the HTML context. Because there is no whitelist validation (e.g., enforcing a numeric-only `id`) and no HTML-context output encoding, any HTML/JavaScript markup supplied in `id` is reflected back and rendered by the browser as part of the page.\n\n**Vulnerable parameter:** `id` (GET)\n**Sink:** Unescaped interpolation into the HTML response body\n\n## Proof of Concept\n\n1. Clone the repository locally:\n   ```\n   git clone https://github.com/nooncarlett/TechStore\n   ```\n2. Install the project's requirements as documented in the repository.\n3. Run the application:\n   ```\n   python app.py\n   ```\n4. In a browser, navigate to:\n   ```\n   http://127.0.0.1:5001/contact_display?id=1alert('XSS POPUP')\n   ```\n5. The injected `` executes and the `alert('XSS POPUP')` dialog fires, confirming the reflected XSS.\n\n## Attack Scenario\n\nBecause the payload is delivered entirely via a GET request, an attacker can weaponize it as a simple link:\n\n```\nhttp:///contact_display?id=1...attacker JS...\n```\n\nThis link can be distributed via phishing email, chat, or social media. When a victim who is logged into the application opens the link, the attacker's script executes in the victim's browser session, with the same access as the victim \u2014 enabling session/cookie theft, unauthorized actions performed as the victim, or delivery of further malicious payloads (e.g., redirects, credential-harvesting overlays).\n\n## Impact\n\n- **Confidentiality:** Disclosure of session tokens / sensitive in-page data reachable by script.\n- **Integrity:** Ability to perform actions as the authenticated victim (e.g., form submissions) via injected script.\n- **Availability:** Not directly impacted.\n\n**Suggested CVSS v3.1 vector (self-assessed):**\n`AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N` \u2014 **Base Score: 6.1 (Medium)**\n\n*(Attack Vector: Network, Attack Complexity: Low, Privileges Required: None, User Interaction: Required, Scope: Unchanged, Confidentiality: Low, Integrity: Low, Availability: None)*\n\n## Remediation\n\n- Apply context-aware output encoding to any user-controllable value rendered into HTML (e.g., HTML-entity encode `id` before interpolation).\n- Validate/whitelist the `id` parameter server-side (e.g., enforce it is numeric before use).\n- Deploy a restrictive Content-Security-Policy (CSP) to reduce the impact of any residual injection points (e.g., disallow inline `` execution).\n\n## Disclosure Timeline\n\n- Vulnerability discovered and reported to MITRE's CVE Assignment Team (CNA of Last Resort) for the affected open-source project.\n- CVE-2025-63607 reserved and confirmed via official MITRE assignment email.\n- Public write-up published by the discoverer to support record publication.\n\n## References\n\n- [CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')](https://cwe.mitre.org/data/definitions/79.html)\n- [OWASP Cross Site Scripting Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html)\n- [MDN: Cross-site scripting (XSS)](https://developer.mozilla.org/en-US/docs/Web/Security/Cross-site_scripting_(XSS))\n- [Affected repository: nooncarlett/TechStore](https://github.com/nooncarlett/TechStore)\n- [CVE Record (pending publication): CVE-2025-63607](https://www.cve.org/CVERecord?id=CVE-2025-63607)\n\n---\n\n*Reported and documented by Mohammed ElKhateb ([HoRRus](https://horrus-offsec.com/)) \u2014 [LinkedIn](https://www.linkedin.com/in/mohammed-elkhateb-horrus) \u00b7 [Hack The Box](https://app.hackthebox.com/users/1506676)*\n", "creation_timestamp": "2026-08-29T00:00:52.457294Z"}]}