{"vulnerability": "cve-2025-3410", "sightings": [{"uuid": "a9463c43-1b54-4ad8-92ec-6b24b7eda42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ltpqk64um223", "content": "", "creation_timestamp": "2025-07-11T21:02:21.900631Z"}, {"uuid": "f96a1975-2832-413e-8d7c-d532944906f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34107", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/winaxe_server_ready.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b2381621-437a-4831-9df0-de18d3524eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34108", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/disk_pulse_enterprise_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d79eecb8-f8d2-4b69-8b25-9ffa85b5c469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34109", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/panda_psevents.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d1159f36-668f-4b4b-b079-185c3a8a813d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34104", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "8b877873-2045-485d-b518-663a623556fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34105", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bc61c293-e9e3-4173-984e-a93e2773b16b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34106", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "88c3138b-5b25-4868-8bf7-72e3ddafbaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34107", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bfd59259-c2ee-443d-a975-babc2315d135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "58c11e85-c768-4701-9e99-4c94f98a3912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "f37ed476-fe0d-46b3-bae3-29385fb8c3ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34102", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "7f274816-bc90-45cd-9231-a711f673d818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34103", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "aa07418e-a391-4039-95b6-dc2dbf17a8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34108", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "926875dc-6607-483f-b9cc-4a0b196d415f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34109", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "4f3eed4b-7829-4223-8076-330ac6abebfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsb32em2y", "content": "", "creation_timestamp": "2025-08-17T21:02:28.428216Z"}, {"uuid": "1ee45ad6-bd6b-43af-9504-dc8f6d6c6885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wipg1000_cmd_injection.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d3e63b23-18dd-4ee6-8f90-ef59accc37bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34102", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/crypttech_cryptolog_login_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c24b333a-310e-473e-a0a5-065f37c57a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/builderengine_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "9bd8dc46-dc51-4f31-a9aa-50ab75b28f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2b052241-32d3-4e06-87cf-9b623a691ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34105", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/diskboss_get_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "62de3c34-aca4-406a-a086-0a50a28bdb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34109", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:36.000000Z"}, {"uuid": "8eb5b1a0-5341-4887-ae11-3295e8b9cd22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34103", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:37.000000Z"}, {"uuid": "407f66cf-ebdb-41ef-931a-da19680384da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34106", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/shaper_pdf_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0f745ebd-a01a-4e68-83cd-f05e39f7b5ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:40.000000Z"}, {"uuid": "df67e460-a114-4282-8eb1-3f811f83146d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34102", "type": "seen", "source": "MISP/e0a0042d-e47b-4875-b781-99d4428af3c2", "content": "", "creation_timestamp": "2025-09-09T20:51:40.000000Z"}, {"uuid": "3d34696e-a9da-41ea-8277-6aa6432ca4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34104", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/piwik_superuser_plugin_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e0c58aa0-7824-4529-ad2c-aeb77978573f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52841", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-34100 test\nURL\uff1ahttps://github.com/hyeonyeonglee/CVE-2025-34100\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-24T00:56:46.000000Z"}, {"uuid": "551e1a8a-e02d-49df-a00f-4a7ae2096c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3410", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3410\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file training_platform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-08T05:00:10.078Z\n\ud83d\udccf Modified: 2025-04-08T05:00:10.078Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303688\n2. https://vuldb.com/?ctiid.303688\n3. https://vuldb.com/?submit.544243\n4. https://github.com/Tr0e/CVE_Hunter/blob/main/AIAS/AIAS_RCE.md", "creation_timestamp": "2025-04-08T05:47:27.000000Z"}, {"uuid": "3b87bd17-20f1-479f-a24d-74d71f72f5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "published-proof-of-concept", "source": "Telegram/CISnvBhtpcTpuXbWc1GKhDmNaPppcwD0-mkgvvv0pIShiw8", "content": "", "creation_timestamp": "2025-09-25T04:38:43.000000Z"}, {"uuid": "208fdf9c-34ff-4c28-8f82-4b95eb3cfb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3410", "type": "seen", "source": "https://t.me/cvedetector/22399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3410 - MyMagicPower AIAS Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3410 \nPublished : April 8, 2025, 5:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file training_platform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:34.000000Z"}, {"uuid": "0d35e337-65cc-4224-a310-ce4b5d8c8f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34102", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/crypttech_cryptolog_login_exec.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"Mehmet Ince \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection and command injection vulnerability in the PHP version of CryptoLog.\\n          An unauthenticated user can execute a terminal command under the context of the web user. These vulnerabilities\\n          are no longer present in the ASP.NET version CryptoLog, available since 2009.\\n\\n          CryptoLog's login.php endpoint is responsible for the login process. One of the user supplied parameters is\\n          used by the application without input validation and parameter binding, which leads to SQL injection\\n          vulnerability. Successfully exploiting this vulnerability gives a valid session.\\n\\n          CryptoLog's logshares_ajax.php endpoint is responsible for executing an operation system command. It's not\\n          possible to access this endpoint without having a valid session. One user parameter is used by the\\n          application while executing an operating system command, which causes a command injection issue.\\n\\n          Combining these vulnerabilities gives the opportunity execute operation system commands under the context\\n          of the web user.\", \"disclosure_date\": \"2017-05-03\", \"fullname\": \"exploit/linux/http/crypttech_cryptolog_login_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Crypttech CryptoLog Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/crypttech_cryptolog_login_exec.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/crypttech_cryptolog_login_exec\", \"references\": [\"CVE-2025-34102\", \"URL-https://pentest.blog/advisory-cryptolog-unauthenticated-remote-code-execution/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:28.987812Z"}, {"uuid": "f5ed5ca2-bf13-4f64-a45d-4b47a83677f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34103", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wipg1000_cmd_injection.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Matthias Brun\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in an undocumented\\n          CGI file in several versions of the WePresent WiPG-1000 devices.\\n          Version 2.0.0.7 was confirmed vulnerable, 2.2.3.0 patched this vulnerability.\", \"disclosure_date\": \"2017-04-20\", \"fullname\": \"exploit/linux/http/wipg1000_cmd_injection\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"WePresent WiPG-1000 Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/wipg1000_cmd_injection.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/wipg1000_cmd_injection\", \"references\": [\"CVE-2025-34103\", \"URL-https://www.redguard.ch/advisories/wepresent-wipg1000.txt\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"WiPG-1000 <=2.0.0.7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:03.628784Z"}, {"uuid": "ed0b8c5c-0538-4dbd-a933-f5a1dc4fae28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34100", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/builderengine_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"metanubix\", \"Marco Rivoli\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in BuilderEngine 3.5.0\\n          via elFinder 2.0. The jquery-file-upload plugin can be abused to upload a malicious\\n          file, which would result in arbitrary remote code execution under the context of\\n          the web server.\", \"disclosure_date\": \"2016-09-18\", \"fullname\": \"exploit/multi/http/builderengine_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"BuilderEngine Arbitrary File Upload Vulnerability and execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/builderengine_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/builderengine_upload_exec\", \"references\": [\"CVE-2025-34100\", \"EDB-40390\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"BuilderEngine 3.5.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:42.971047Z"}, {"uuid": "542cf335-38dc-4fa0-bff8-cf6345c58552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34104", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/piwik_superuser_plugin_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"FireFart\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will generate a plugin, pack the payload into it\\n          and upload it to a server running Piwik. Superuser Credentials are\\n          required to run this module. This module does not work against Piwik 1\\n          as there is no option to upload custom plugins. Piwik disabled\\n          custom plugin uploads in version 3.0.3. From version 3.0.3 onwards you\\n          have to enable custom plugin uploads via the config file.\\n          Tested with Piwik 2.14.0, 2.16.0, 2.17.1 and 3.0.1.\", \"disclosure_date\": \"2017-02-05\", \"fullname\": \"exploit/unix/webapp/piwik_superuser_plugin_upload\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Piwik Superuser Plugin Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/piwik_superuser_plugin_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/piwik_superuser_plugin_upload\", \"references\": [\"CVE-2025-34104\", \"URL-https://firefart.at/post/turning_piwik_superuser_creds_into_rce/\", \"URL-https://piwik.org/faq/plugins/faq_21/\", \"URL-https://piwik.org/changelog/piwik-3-0-3/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Piwik\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:46.650663Z"}, {"uuid": "cf81139a-466a-4afb-a12e-136d2cb61099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34106", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/shaper_pdf_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"metacom27 \", \"metacom\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"PDF Shaper is prone to a security vulnerability when processing PDF files.\\n          The vulnerability appears when we use Convert PDF to Image and use a specially\\n          crafted PDF file. This module has been tested successfully on Win XP, Win 7,\\n          Win 8, Win 10.\", \"disclosure_date\": \"2015-10-03\", \"fullname\": \"exploit/windows/fileformat/shaper_pdf_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"PDF Shaper Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/shaper_pdf_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/shaper_pdf_bof\", \"references\": [\"CVE-2025-34106\", \"EDB-37760\"], \"rport\": null, \"session_types\": false, \"targets\": [\"\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:31.428869Z"}, {"uuid": "6981064e-a0d7-41a9-8f7c-35311a4b0158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34108", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/disk_pulse_enterprise_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Chris Higgins\", \"Tulpa Security\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in Disk Pulse Enterprise\\n          9.0.34. If a malicious user sends a malicious HTTP login request,\\n          it is possible to execute a payload that would run under the Windows\\n          NT AUTHORITY\\\\SYSTEM account. Due to size constraints, this module\\n          uses the Egghunter technique.\", \"disclosure_date\": \"2016-10-03\", \"fullname\": \"exploit/windows/http/disk_pulse_enterprise_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Disk Pulse Enterprise Login Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/disk_pulse_enterprise_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/disk_pulse_enterprise_bof\", \"references\": [\"CVE-2025-34108\", \"EDB-40452\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Disk Pulse Enterprise 9.0.34\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:44.309414Z"}, {"uuid": "a8eb5dbb-f10f-409f-a117-73a2dd58ba76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34107", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/winaxe_server_ready.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Chris Higgins\", \"hyp3rlix\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow in the WinaXe 7.7 FTP client.\\n          This issue is triggered when a client connects to the server and is\\n          expecting the Server Ready response.\", \"disclosure_date\": \"2016-11-03\", \"fullname\": \"exploit/windows/ftp/winaxe_server_ready\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"WinaXe 7.7 FTP Client Remote Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/ftp/winaxe_server_ready.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/ftp/winaxe_server_ready\", \"references\": [\"CVE-2025-34107\", \"EDB-40693\", \"URL-http://hyp3rlinx.altervista.org/advisories/WINAXE-FTP-CLIENT-REMOTE-BUFFER-OVERFLOW.txt\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:40.586357Z"}, {"uuid": "4fecfeb1-731f-45f7-b142-e4833205c748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34105", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/diskboss_get_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"vportal\", \"Ahmad Mahfouz\", \"Gabor Seljan\", \"Jacob Robles\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow vulnerability\\n          in the web interface of DiskBoss Enterprise v7.5.12, v7.4.28, and v8.2.14,\\n          caused by improper bounds checking of the request path in HTTP GET\\n          requests sent to the built-in web server. This module has been\\n          tested successfully on Windows XP SP3 and Windows 7 SP1.\", \"disclosure_date\": \"2016-12-05\", \"fullname\": \"exploit/windows/http/diskboss_get_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"DiskBoss Enterprise GET Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/diskboss_get_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/diskboss_get_bof\", \"references\": [\"CVE-2025-34105\", \"EDB-40869\", \"EDB-42395\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Targeting\", \"DiskBoss Enterprise v7.4.28\", \"DiskBoss Enterprise v7.5.12\", \"DiskBoss Enterprise v8.2.14\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:44.463653Z"}, {"uuid": "240e5cb5-a1e4-4106-9309-615cfa52c464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34101", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Gjoko Krstic(LiquidWorm) \", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote command execution vulnerability\\n          in the console component of Serviio Media Server versions 1.4 to 1.8 on\\n          Windows operating systems.\\n\\n          The console service (on port 23423 by default) exposes a REST API which\\n          which does not require authentication.\\n\\n          The 'action' API endpoint does not sufficiently sanitize user-supplied data\\n          in the 'VIDEO' parameter of the 'checkStreamUrl' method. This parameter is\\n          used in a call to cmd.exe resulting in execution of arbitrary commands.\\n\\n          This module has been tested successfully on Serviio Media Server versions\\n          1.4.0, 1.5.0, 1.6.0 and 1.8.0 on Windows 7.\", \"disclosure_date\": \"2017-05-03\", \"fullname\": \"exploit/windows/http/serviio_checkstreamurl_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Serviio Media Server checkStreamUrl Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/serviio_checkstreamurl_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/serviio_checkstreamurl_cmd_exec\", \"references\": [\"CVE-2025-34101\", \"OSVDB-41961\", \"PACKETSTORM-142387\", \"URL-http://www.zeroscience.mk/en/vulnerabilities/ZSL-2017-5408.php\", \"URL-https://blogs.securiteam.com/index.php/archives/3094\"], \"rport\": 23423, \"session_types\": false, \"targets\": [\"Automatic Targeting\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:58.229945Z"}, {"uuid": "0a2b728f-5fc3-4671-95df-4c9474b7151f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34109", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/panda_psevents.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die \", \"Security-Assessment.com\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges.\\n          When run, it checks a user writable folder for certain DLL files, and if any are found\\n          they are automatically run.\\n          Vulnerable Products:\\n          Panda Global Protection 2016 (<=16.1.2)\\n          Panda Antivirus Pro 2016 (<=16.1.2)\\n          Panda Small Business Protection (<=16.1.2)\\n          Panda Internet Security 2016 (<=16.1.2)\", \"disclosure_date\": \"2016-06-27\", \"fullname\": \"exploit/windows/local/panda_psevents\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"Panda Security PSEvents Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/panda_psevents.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/local/panda_psevents\", \"references\": [\"CVE-2025-34109\", \"EDB-40020\", \"URL-http://www.security-assessment.com/files/documents/advisory/Panda%20Security%20-%20Privilege%20Escalation.pdf\", \"URL-http://www.pandasecurity.com/uk/support/card?id=100053\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows x86\", \"Windows x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:12.599563Z"}]}