{"vulnerability": "cve-2025-3412", "sightings": [{"uuid": "8e62ce02-cbdd-493b-9f63-63276440daea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34129", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lu4idwfthy26", "content": "", "creation_timestamp": "2025-07-16T22:40:18.999010Z"}, {"uuid": "8130cd0c-b293-4fe2-a569-98285293ceba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34120", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdl6srv2w", "content": "", "creation_timestamp": "2025-07-17T21:02:18.878525Z"}, {"uuid": "51ed2575-0624-4ab1-a011-f4d15549caaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34129", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdlbhy62c", "content": "", "creation_timestamp": "2025-07-17T21:02:19.601300Z"}, {"uuid": "22521a4d-00f4-451c-8e67-0a994ebb8842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34123", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "eef68624-4138-402b-9002-952720773d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34120", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "2ff6aba4-e876-4837-8ff8-09763e5f06e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34121", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "62792e97-cb86-44a7-a04b-f624a9565a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34124", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bd37ba28-2db8-4a3a-9208-996b0a954de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34125", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "2147058a-dda2-4580-a167-63305eee28ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34126", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "0df98098-1009-4871-b9c6-86f96f8121e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34127", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "4399dd70-69ee-4d4b-a24a-fc10f68dbccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34128", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "b0f3f18a-8c7a-46dc-8bc6-19406445fbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34120", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/limesurvey_file_download.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "75a56aad-d138-49e7-9e63-a56ba02fbcf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34126", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rips_traversal.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5807ca4e-5c39-4213-80c9-40edf3e31edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34125", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dspw110_cookie_noauth_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "48c360d4-7584-428b-9d1e-1d15d9662237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34123", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/videocharge_studio.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d08f791e-787c-4a8d-b93f-553e1a556350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/homm3_h3m.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "4f8869f0-91ca-4775-bdc2-ae948aafeace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34121", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/uptime_file_upload_1.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5d9916ca-7a77-407a-8100-3e7d49ac180a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34128", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/x360_video_player_set_text_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "9da27f75-b276-4e00-8fa7-3d172a4d2c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34127", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/achat_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c8a8480b-9b40-4b9c-a61d-77c49b25413a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3412", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3412\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2_training_platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-08T05:31:05.642Z\n\ud83d\udccf Modified: 2025-04-08T05:31:05.642Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303690\n2. https://vuldb.com/?ctiid.303690\n3. https://vuldb.com/?submit.544289\n4. https://github.com/Tr0e/CVE_Hunter/blob/main/AIAS/AIAS_SSRF2.md", "creation_timestamp": "2025-04-08T05:47:25.000000Z"}, {"uuid": "ccd7287d-d267-438d-be3c-1db16ce13598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3412", "type": "seen", "source": "https://t.me/cvedetector/22395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3412 - Mymagicpower AIAS Server-Side Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3412 \nPublished : April 8, 2025, 6:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2_training_platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:28.000000Z"}, {"uuid": "c0c54609-7390-4168-99f3-331201005004", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34129", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/717a37e8-4051-43c5-b27b-e273b1e001b6", "content": "", "creation_timestamp": "2026-06-19T12:45:29.024687Z"}, {"uuid": "0446044b-0ef0-4aa0-a751-5b0900c99b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34120", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/limesurvey_file_download.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pichaya Morimoto\", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated file download vulnerability\\n          in limesurvey between 2.0+ and 2.06+ Build 151014. The file is downloaded\\n          as a ZIP and unzipped automatically, thus binary files can be downloaded.\", \"disclosure_date\": \"2015-10-12\", \"fullname\": \"auxiliary/admin/http/limesurvey_file_download\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Limesurvey Unauthenticated File Download\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/limesurvey_file_download.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/limesurvey_file_download\", \"references\": [\"CVE-2025-34120\", \"URL-https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-lime-survey/\", \"URL-https://www.limesurvey.org/blog/22-security/136-limesurvey-security-advisory-10-2015\", \"URL-https://github.com/LimeSurvey/LimeSurvey/compare/2.06_plus_151014...2.06_plus_151016?w=1\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:47.091075Z"}, {"uuid": "abebc428-b890-4036-b964-67b572ee9edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34126", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rips_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"localh0t\", \"Roberto Soares Espreto \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability in the RIPS Scanner v0.54,\\n          allowing to read arbitrary files with the web server privileges.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/rips_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"RIPS Scanner Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/rips_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/rips_traversal\", \"references\": [\"CVE-2025-34126\", \"EDB-18660\", \"URL-http://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:50.801530Z"}, {"uuid": "a47003a1-9207-481f-923c-1c68fa36089c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34125", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dspw110_cookie_noauth_exec.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle, mipsbe\", \"author\": [\"Peter Adkins \", \"Michael Messner \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an anonymous remote upload and code execution vulnerability on different\\n          D-Link devices. The vulnerability is a command injection in the cookie handling process of the\\n          lighttpd web server when handling specially crafted cookie values. This module has been\\n          successfully tested on D-Link DSP-W110A1_FW105B01 in emulated environment.\", \"disclosure_date\": \"2015-06-12\", \"fullname\": \"exploit/linux/http/dlink_dspw110_cookie_noauth_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"D-Link Cookie Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_dspw110_cookie_noauth_exec.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"linux/http/dlink_dspw110_cookie_noauth_exec\", \"references\": [\"CVE-2025-34125\", \"URL-http://web.archive.org/web/20160125171424/https://github.com/darkarnium/secpub/tree/master/D-Link/DSP-W110\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"MIPS Little Endian\", \"MIPS Big Endian\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:30.701508Z"}, {"uuid": "35c8a0d7-a7cd-4903-81f5-7c1f318e65f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34121", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/uptime_file_upload_1.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Denis Andzakovic \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability found within the Up.Time\\n          monitoring server 7.2 and below. A malicious entity can upload a PHP file into the\\n          webroot without authentication, leading to arbitrary code execution.\\n\\n          Although the vendor fixed Up.Time to prevent this vulnerability, it was not properly\\n          mitigated. To exploit against a newer version of Up.Time (such as 7.4), please use\\n          exploits/multi/http/uptime_file_upload_2.\", \"disclosure_date\": \"2013-11-19\", \"fullname\": \"exploit/multi/http/uptime_file_upload_1\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Idera Up.Time Monitoring Station 7.0 post2file.php Arbitrary File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/uptime_file_upload_1.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/uptime_file_upload_1\", \"references\": [\"CVE-2025-34121\", \"OSVDB-100423\", \"BID-64031\", \"URL-http://www.security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf\"], \"rport\": 9999, \"session_types\": false, \"targets\": [\"Up.Time 7.0/7.2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:17.941140Z"}, {"uuid": "8ff63849-b959-4740-8c5d-6089631d3484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34128", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/x360_video_player_set_text_bof.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Rh0\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow in the VideoPlayer.ocx ActiveX installed with the\\n          X360 Software. By setting an overly long value to 'ConvertFile()', an attacker can overrun\\n          a .data buffer to bypass ASLR/DEP and finally execute arbitrary code.\", \"disclosure_date\": \"2015-01-30\", \"fullname\": \"exploit/windows/browser/x360_video_player_set_text_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"X360 VideoPlayer ActiveX Control Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/x360_video_player_set_text_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/x360_video_player_set_text_bof\", \"references\": [\"CVE-2025-34128\", \"EDB-35948\", \"URL-https://rh0dev.github.io/blog/2015/fun-with-info-leaks/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:17.028479Z"}, {"uuid": "11b1fff7-fedd-48c2-b745-7d113c8b9542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/homm3_h3m.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Pierre Lindblad\", \"John AAkerblom\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module embeds an exploit into an uncompressed map file (.h3m) for\\n          Heroes of Might and Magic III. Once the map is started in-game, a\\n          buffer overflow occurring when loading object sprite names leads to\\n          shellcode execution.\", \"disclosure_date\": \"2015-07-29\", \"fullname\": \"exploit/windows/fileformat/homm3_h3m\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Heroes of Might and Magic III .h3m Map file Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/homm3_h3m.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/homm3_h3m\", \"references\": [\"CVE-2025-34124\", \"EDB-37716\"], \"rport\": null, \"session_types\": false, \"targets\": [\"H3 Complete 4.0.0.0  [Heroes3.exe 78956DFAB3EB8DDF29F6A84CF7AD01EE]\", \"HD Mod 3.808 build 9 [Heroes3 HD.exe 56614D31CC6F077C2D511E6AF5619280]\", \"Heroes III Demo 1.0.0.0 [h3demo.exe 522B6F45F534058D02A561838559B1F4]\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:25.524175Z"}, {"uuid": "d2ed370c-1476-4644-961a-361e5e256985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34123", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/videocharge_studio.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"metacom\", \"Andrew Smith\", \"Christian Mehlmauer \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack based buffer overflow in VideoCharge Studio 2.12.3.685 when\\n          processing a specially crafted .VSC file. This vulnerability could be\\n          exploited by a remote attacker to execute arbitrary code on the target\\n          machine by enticing a user of VideoCharge Studio to open a malicious .VSC file.\", \"disclosure_date\": \"2013-10-27\", \"fullname\": \"exploit/windows/fileformat/videocharge_studio\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"VideoCharge Studio Buffer Overflow (SEH)\", \"needs_cleanup\": null, \"notes\": {\"NOCVE\": [\"Reason not given\"], \"Reliability\": [], \"SideEffects\": [], \"Stability\": []}, \"path\": \"/modules/exploits/windows/fileformat/videocharge_studio.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/videocharge_studio\", \"references\": [\"CVE-2025-34123\", \"OSVDB-69616\", \"EDB-29234\"], \"rport\": null, \"session_types\": false, \"targets\": [\"VideoCharge Studio 2.12.3.685\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:32.538857Z"}, {"uuid": "6c8540f0-3276-4772-ba12-70da216c9cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34127", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/achat_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Peter Kasza \", \"Balazs Bucsay \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a Unicode SEH buffer overflow in Achat. By\\n          sending a crafted message to the default port 9256/UDP, it's possible to overwrite the\\n          SEH handler. Even when the exploit is reliable, it depends on timing since there are\\n          two threads overflowing the stack in the same time. This module has been tested on\\n          Achat v0.150 running on Windows XP SP3 and Windows 7.\", \"disclosure_date\": \"2014-12-18\", \"fullname\": \"exploit/windows/misc/achat_bof\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Achat Unicode SEH Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/achat_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/misc/achat_bof\", \"references\": [\"CVE-2025-34127\", \"CWE-121\"], \"rport\": 9256, \"session_types\": false, \"targets\": [\"Achat beta v0.150 / Windows XP SP3 / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:14.363815Z"}]}