{"vulnerability": "cve-2025-3411", "sightings": [{"uuid": "25d7d452-9859-4e6e-9a3f-18aca29390f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34112", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "b5fdab86-6cc5-4adc-9150-ac74a99012ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34113", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "6e0923cc-d496-4e4c-ab25-fd7c6dc749ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34115", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "f3a7b21f-5168-4aa3-8d7a-05667478501d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34116", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "f3753105-ec38-4ec2-8d27-6201e147985a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34117", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "6fb2f44a-f2c2-495d-8d03-6b3ac3f19399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34118", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "db948537-2c94-4895-9fa1-6f4130ecd5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34110", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "33b6bac8-7ccf-4d92-a9f8-9492c77dbdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34111", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "ffc56847-1ed2-40b8-a4f9-b29f3bd45880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34119", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "a5638ebd-807d-4037-be27-d652ad5a42e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34118", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/linknat_vos_traversal.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bb4fa4fe-d77a-4973-ac11-362495db2396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34110", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "a21173a7-c8bd-47fe-9fd4-45c25ba7a3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34119", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/easycafe_server_fileaccess.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e0cc18d4-8d68-44ee-967f-81f054697944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34117", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/netcore_udp_53413_backdoor.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5a2bd3c2-b145-4ecb-8a5c-455ec4362bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34116", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_proxy_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "82bf2d38-f479-4983-8e2f-b0373b5e8c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34112", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/riverbed_netprofiler_netexpress_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "85b6b4dc-0be1-43a1-9bef-30199f9d5bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34115", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/op5_config_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "57623e87-9861-4dca-ac90-857a984d0b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34113", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tiki_calendar_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "81d0eb08-5296-48a6-afe0-51ab33197592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34111", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tikiwiki_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "714bfd53-086a-404c-8044-182f744e33f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34119", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:45.000000Z"}, {"uuid": "f9e03fc0-4983-4307-88eb-5fce9dcd4434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34117", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3tcqo2i", "content": "", "creation_timestamp": "2026-03-12T21:02:39.168130Z"}, {"uuid": "1d38ba06-1f47-4014-8d58-63390ff31f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3411", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3411\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some unknown processing of the file 3_api_platform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-08T05:00:12.594Z\n\ud83d\udccf Modified: 2025-04-08T05:00:12.594Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303689\n2. https://vuldb.com/?ctiid.303689\n3. https://vuldb.com/?submit.544288\n4. https://github.com/Tr0e/CVE_Hunter/blob/main/AIAS/AIAS_SSRF1.md", "creation_timestamp": "2025-04-08T05:47:26.000000Z"}, {"uuid": "9ce4ece9-30e5-4d6e-b19c-055e4f38edad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3411", "type": "seen", "source": "https://t.me/cvedetector/22400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3411 - Mymagicpower AIAS SSRF\", \n  \"Content\": \"CVE ID : CVE-2025-3411 \nPublished : April 8, 2025, 5:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some unknown processing of the file 3_api_platform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:35.000000Z"}, {"uuid": "fca0241a-6e3b-4d00-96d4-42d7955c7414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34117", "type": "seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "content": "", "creation_timestamp": "2026-07-16T12:15:03.679352Z"}, {"uuid": "67f78e90-bc16-4748-b8e7-2bdb227948f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34110", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die \", \"RvLaboratory\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability found in ColoradoFTP server\\n          version <= 1.3 Build 8. This vulnerability allows an attacker to download and upload arbitrary files\\n          from the server GET/PUT command including file system traversal strings starting with '\\\\'.\\n          The server is written in Java and therefore platform independent, however this vulnerability is only\\n          exploitable on the Windows version.\", \"disclosure_date\": \"2016-08-11\", \"fullname\": \"auxiliary/scanner/ftp/colorado_ftp_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"ColoradoFTP Server 1.3 Build 8 Directory Traversal Information Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/ftp/colorado_ftp_traversal\", \"references\": [\"CVE-2025-34110\", \"EDB-40231\", \"URL-https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86\", \"URL-https://bugtraq.securityfocus.com/archive/1/539186\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:25.517162Z"}, {"uuid": "aa2bd807-e196-4bdd-bcbe-b61f78ce6b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34118", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/linknat_vos_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Nixawk\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to test whether a file traversal vulnerability\\n          is present in version of linknat vos2009/vos3000\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/linknat_vos_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Linknat Vos Manager Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/linknat_vos_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/linknat_vos_traversal\", \"references\": [\"CVE-2025-34118\", \"URL-http://www.linknat.com/\", \"URL-http://www.wooyun.org/bugs/wooyun-2010-0145458\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:36.340272Z"}, {"uuid": "c4067d97-be9b-42ca-b00a-3261f4d70fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34119", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/easycafe_server_fileaccess.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"R-73eN\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a file retrieval vulnerability in\\n          EasyCafe Server. The vulnerability can be triggered by\\n          sending a specially crafted packet (opcode 0x43) to the\\n          831/TCP port.\\n          This module has been successfully tested on EasyCafe Server\\n          version 2.2.14 (Trial mode and Demo mode) on Windows XP SP3\\n          and Windows 7 SP1.\\n          Note that the server will throw a popup messagebox if the\\n          specified file does not exist.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/misc/easycafe_server_fileaccess\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"EasyCafe Server Remote File Access\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/misc/easycafe_server_fileaccess.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/misc/easycafe_server_fileaccess\", \"references\": [\"CVE-2025-34119\", \"EDB-39102\"], \"rport\": 831, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:00.767080Z"}, {"uuid": "ef19ea32-8b5f-4f75-9e7d-5d82fbb533b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34116", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ipfire_proxy_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die \", \"Yann CAM\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"IPFire, a free linux based open source firewall distribution,\\n          version < 2.19 Update Core 101 contains a remote command execution\\n          vulnerability in the proxy.cgi page.\", \"disclosure_date\": \"2016-05-04\", \"fullname\": \"exploit/linux/http/ipfire_proxy_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"IPFire proxy.cgi RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/ipfire_proxy_exec.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/ipfire_proxy_exec\", \"references\": [\"CVE-2025-34116\", \"EDB-39765\", \"URL-https://www.ipfire.org/news/ipfire-2-19-core-update-101-released\"], \"rport\": 444, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:39.461183Z"}, {"uuid": "8b007cce-c833-4e9c-a629-46fa0d3e3940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34115", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/op5_config_exec.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"h00die \", \"hyp3rlinx\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"op5 an open source network monitoring software.\\n          The configuration page in version 7.1.9 and below\\n          allows the ability to test a system command, which\\n          can be abused to run arbitrary code as an unpriv user.\", \"disclosure_date\": \"2016-04-08\", \"fullname\": \"exploit/linux/http/op5_config_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"op5 v7.1.9 Configuration Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/op5_config_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/op5_config_exec\", \"references\": [\"CVE-2025-34115\", \"EDB-39676\", \"URL-https://www.op5.com/blog/news/op5-monitor-7-2-0-release-notes/\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.944331Z"}, {"uuid": "75c6fbaf-fd3b-4c70-b16e-c6b98f641808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34112", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/riverbed_netprofiler_netexpress_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x64\", \"author\": [\"Francesco Oddo \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits three separate vulnerabilities found in the Riverbed SteelCentral NetProfiler/NetExpress\\n          virtual appliances to obtain remote command execution as the root user. A SQL injection in the login form\\n          can be exploited to add a malicious user into the application's database. An attacker can then exploit a\\n          command injection vulnerability in the web interface to obtain arbitrary code execution. Finally, an insecure\\n          configuration of the sudoers file can be abused to escalate privileges to root.\", \"disclosure_date\": \"2016-06-27\", \"fullname\": \"exploit/linux/http/riverbed_netprofiler_netexpress_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Riverbed SteelCentral NetProfiler/NetExpress Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/riverbed_netprofiler_netexpress_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/riverbed_netprofiler_netexpress_exec\", \"references\": [\"CVE-2025-34112\", \"URL-http://www.security-assessment.com/files/documents/advisory/Riverbed-SteelCentral-NetProfilerNetExpress-Advisory.pdf\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Riverbed SteelCentral NetProfiler 10.8.7 / Riverbed NetExpress 10.8.7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:54.559701Z"}, {"uuid": "fea93bf3-166c-47c2-ba59-2f0fc7cd7755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34113", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tiki_calendar_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"h00die \", \"Dany Ouellet\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Tiki-Wiki CMS's calendar module contains a remote code execution\\n          vulnerability within the viewmode GET parameter.\\n          The calendar module is NOT enabled by default.  If enabled,\\n          the default permissions are set to NOT allow anonymous users\\n          to access.\\n\\n          Vulnerable versions: <=14.1, <=12.4 LTS, <=9.10 LTS and <=6.14\\n          Verified/Tested against 14.1\", \"disclosure_date\": \"2016-06-06\", \"fullname\": \"exploit/linux/http/tiki_calendar_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Tiki-Wiki CMS Calendar Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/tiki_calendar_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tiki_calendar_exec\", \"references\": [\"CVE-2025-34113\", \"EDB-39965\", \"URL-https://tiki.org/article414-Important-Security-Fix-for-all-versions-of-Tiki\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:58.552231Z"}, {"uuid": "43b0027c-913d-4e3c-a5cc-03be922de835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34117", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/netcore_udp_53413_backdoor.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle, mipsbe\", \"author\": [\"Nixawk\", \"h00die \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Routers manufactured by Netcore, a popular brand for networking\\n          equipment in China, have a wide-open backdoor that can be fairly\\n          easily exploited by attackers. These products are also sold under\\n          the Netis brand name outside of China. This backdoor allows\\n          cyber criminals to easily run arbitrary code on these routers,\\n          rendering it vulnerable as a security device.\\n          Some models include a non-standard echo command which doesn't\\n          honor -e, and are therefore not currently exploitable with\\n          Metasploit.  See URLs or module markdown for additional options.\", \"disclosure_date\": \"2014-08-25\", \"fullname\": \"exploit/linux/misc/netcore_udp_53413_backdoor\", \"is_install_path\": true, \"mod_time\": \"2026-05-14 11:43:36 +0000\", \"name\": \"Netcore Router Udp 53413 Backdoor\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/netcore_udp_53413_backdoor.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/misc/netcore_udp_53413_backdoor\", \"references\": [\"CVE-2025-34117\", \"URL-https://www.seebug.org/vuldb/ssvid-90227\", \"URL-http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/\", \"URL-https://github.com/h00die/MSF-Testing-Scripts/blob/master/netis_backdoor.py\"], \"rport\": 53413, \"session_types\": false, \"targets\": [\"MIPS Little Endian\", \"MIPS Big Endian\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.176337Z"}, {"uuid": "d1023a79-67ed-4135-8388-17a739151939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34111", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/tikiwiki_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Mehmet Ince \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in Tiki Wiki <= 15.1\\n          which could be abused to allow unauthenticated users to execute arbitrary code\\n          under the context of the web server user.\\n\\n          The issue comes with one of the 3rd party components. Name of that component is\\n          ELFinder -version 2.0-. This component comes with default example page which\\n          demonstrates file operations such as upload, remove, rename, create directory etc.\\n          Default configuration does not force validations such as file extension, content-type etc.\\n          Thus, unauthenticated user can upload PHP file.\\n\\n          The exploit has been tested on Debian 8.x 64-bit and Tiki Wiki 15.1.\", \"disclosure_date\": \"2016-07-11\", \"fullname\": \"exploit/unix/webapp/tikiwiki_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Tiki Wiki Unauthenticated File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/tikiwiki_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/tikiwiki_upload_exec\", \"references\": [\"CVE-2025-34111\", \"URL-https://www.mehmetince.net/exploit/tiki-wiki-unauthenticated-file-upload-vulnerability\", \"URL-https://tiki.org/article434-Security-update-Tiki-15-2-Tiki-14-4-and-Tiki-12-9-released\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:48.334891Z"}, {"uuid": "ac1c656e-e082-48fb-9f36-4ac1559f020f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34115", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv42ab4dek25", "content": "[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)\n\nPosted by disclosure via Fulldisclosure on Sep 08TO: fulldisclosure () seclists org \nSUBJECT: [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-20\u2026\n#hackernews #news", "creation_timestamp": "2026-09-09T17:19:07.646789Z"}]}