{"vulnerability": "cve-2025-4893", "sightings": [{"uuid": "082b1ade-e55d-44cd-85d6-de5914a015e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48930", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114586815688198231", "content": "", "creation_timestamp": "2025-05-28T18:14:10.838989Z"}, {"uuid": "1fc2a7e0-b470-4c46-88eb-5f442e8e5fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48931", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114586815688198231", "content": "", "creation_timestamp": "2025-05-28T18:14:10.927683Z"}, {"uuid": "6659ce42-0e1e-4f06-8886-e79e00a99ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48930", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lqbbiwuu2n24", "content": "", "creation_timestamp": "2025-05-28T22:40:23.289657Z"}, {"uuid": "05a8f599-f01e-4049-8fb9-83a72c15be86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48938", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfwifn7zbg2", "content": "", "creation_timestamp": "2025-05-30T19:08:14.403181Z"}, {"uuid": "9de1bd17-b375-4249-8327-12374fc9c263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrbfegwxrw2e", "content": "", "creation_timestamp": "2025-06-10T17:14:39.177811Z"}, {"uuid": "123f8471-fa46-4e26-9b53-535f357da32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48934", "type": "seen", "source": "https://bsky.app/profile/wasm.activitypub.awakari.com.ap.brid.gy/post/3lqsm3w6t5j42", "content": "", "creation_timestamp": "2025-06-04T20:07:06.956362Z"}, {"uuid": "a13363ac-e00c-491e-9d16-fb467aa3daac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48935", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsmfarfi6r2", "content": "", "creation_timestamp": "2025-06-04T20:11:51.321272Z"}, {"uuid": "516da9e2-8b48-41f7-9f6e-8e5b076680f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48936", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqerkttznse2", "content": "", "creation_timestamp": "2025-05-30T08:08:14.964182Z"}, {"uuid": "314ca364-3073-4822-94bf-a01975086dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lphxxhs5qn2h", "content": "", "creation_timestamp": "2025-05-18T21:13:00.339053Z"}, {"uuid": "640b27e0-43aa-416d-9275-5d00a323235f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48937", "type": "seen", "source": "https://gist.github.com/EbonJaeger/94d6b11fee980a997a2d1e6007418f90", "content": "", "creation_timestamp": "2025-06-13T18:04:24.000000Z"}, {"uuid": "ffbfd44e-006e-4046-b064-c54ea6dbfe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48936", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114596728193306173", "content": "", "creation_timestamp": "2025-05-30T12:15:03.812628Z"}, {"uuid": "ea415c87-707a-4664-9889-9a0fa421ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lt3g2mq2lp2u", "content": "", "creation_timestamp": "2025-07-03T19:01:28.168870Z"}, {"uuid": "87d9f45d-8bb2-4e69-b205-a9ff96e93db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumrugl3oi2n", "content": "", "creation_timestamp": "2025-07-23T10:13:12.366587Z"}, {"uuid": "34e35798-9957-4520-bd10-253ca11c25e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v", "content": "", "creation_timestamp": "2025-07-23T10:13:13.342958Z"}, {"uuid": "91e55fc1-faf0-4300-ba76-0007f3bf731f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d", "content": "", "creation_timestamp": "2025-07-23T14:47:59.167546Z"}, {"uuid": "bf8b3706-d954-419b-b630-7f4d14f9ac6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d", "content": "", "creation_timestamp": "2025-07-23T14:47:59.289559Z"}, {"uuid": "1590903a-07ec-4ab4-b26b-c499f09efe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lv26zt5u7g2p", "content": "", "creation_timestamp": "2025-07-28T18:13:29.490227Z"}, {"uuid": "571c1dcc-d307-4306-999b-11bd45b89dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lv4ywrbisz2b", "content": "", "creation_timestamp": "2025-07-29T21:02:22.880899Z"}, {"uuid": "0fcda0aa-a371-40e2-bf3b-28440600fce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lv5royfdz42q", "content": "", "creation_timestamp": "2025-07-30T04:25:26.051632Z"}, {"uuid": "641441d2-5d73-4077-af2d-9eb818343163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "seen", "source": "MISP/568b2d02-b066-4570-8cdd-d1881e2d1a41", "content": "", "creation_timestamp": "2025-11-10T13:18:18.000000Z"}, {"uuid": "7c6006a6-52e0-4349-84bd-de0bb48fd0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "exploited", "source": "https://www.exploit-db.com/exploits/52383", "content": "", "creation_timestamp": "2025-07-28T00:00:00.000000Z"}, {"uuid": "b47de3d3-cb70-4f0c-859d-47f002d7aa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-05-18T19:31:03.970Z\n\ud83d\udccf Modified: 2025-05-18T19:31:03.970Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309447\n2. https://vuldb.com/?ctiid.309447\n3. https://vuldb.com/?submit.577907\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md", "creation_timestamp": "2025-05-18T19:37:56.000000Z"}, {"uuid": "2486f2d8-b44c-43c0-9fc6-4001a3612b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48930", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20084", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48930\n\ud83d\udd25 CVSS Score: 2.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.\n\ud83d\udccf Published: 2025-05-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T19:46:40.527Z\n\ud83d\udd17 References:\n1. https://www.wired.com/story/how-the-signal-knock-off-app-telemessage-got-hacked-in-20-minutes/", "creation_timestamp": "2025-07-01T20:09:45.000000Z"}, {"uuid": "59fb41f6-b9d5-4643-9d80-c1ca567add3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/554", "content": "Top Security News for Today\n\nNew York unveils new cyber regulations, $2.5 million grant program for water systems  \nhttps://therecord.media/new-york-cyber-regulations-water-grants\n\nGoogle Sues the Badbox Botnet Operators  \nhttps://www.schneier.com/blog/archives/2025/07/google-sues-the-badbox-botnet-operators.html\n\n[CVE-2025-48932] Invision Community <= 4.7.20 (calendar/view.php) SQL Injection Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1m757kw/cve202548932_invision_community_4720/\n\nThe Guest Who Could: Exploiting LPE in VMWare Tools  \nhttps://www.reddit.com/r/netsec/comments/1m77439/the_guest_who_could_exploiting_lpe_in_vmware_tools/\n\nClorox lawsuit says help-desk contractors handed over passwords in 2023 cyberattack  \nhttps://therecord.media/clorox-cyberattack-lawsuit-cognizant-it-contractor\n\nSuspected admin of major dark web cybercrime forum arrested in Ukraine  \nhttps://therecord.media/suspected-xss-cybercrime-marketplace-admin-arrested\n\nActive Exploitation of Microsoft SharePoint Vulnerabilities  \nhttps://www.reddit.com/r/netsec/comments/1m7bv48/active_exploitation_of_microsoft_sharepoint/\n\nHijacking Cursor\u2019s Agent: How We Took Over an EC2 Instance  \nhttps://www.reddit.com/r/netsec/comments/1m7dbjp/hijacking_cursors_agent_how_we_took_over_an_ec2/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-07-24T09:30:19.000000Z"}, {"uuid": "2dfdd3c6-816c-4ac7-bfd2-6563960b22a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-02T23:18:17.200807Z"}, {"uuid": "ae012d18-3507-47cc-ad4f-097838084cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "published-proof-of-concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "content": "", "creation_timestamp": "2026-08-03T00:26:58.977353Z"}, {"uuid": "e7ad9e8c-ce3f-42d0-a1f4-1f3936f0516e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "published-proof-of-concept", "source": "Telegram/J3IW9JUNrZQpqIAdEWhkq9xiU68g28q9BOBiyI96fMrzQ8w", "content": "", "creation_timestamp": "2026-08-03T02:34:23.751904Z"}, {"uuid": "259cd962-afb1-4e78-9dbe-66f96f617fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48932", "type": "published-proof-of-concept", "source": "Telegram/J3IW9JUNrZQpqIAdEWhkq9xiU68g28q9BOBiyI96fMrzQ8w", "content": "", "creation_timestamp": "2026-08-04T00:00:55.725969Z"}, {"uuid": "622c4c82-8369-4594-8e12-47fbdeea1fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48935", "type": "published-proof-of-concept", "source": "https://github.com/denoland/deno/security/advisories/GHSA-8vxj-4cph-c596", "content": "", "creation_timestamp": "2025-06-03T21:00:54.000000Z"}, {"uuid": "3c9403d4-8217-484f-9eb5-21300a1c5033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48934", "type": "published-proof-of-concept", "source": "https://github.com/denoland/deno/security/advisories/GHSA-7w8p-chxq-2789", "content": "", "creation_timestamp": "2025-06-03T21:04:23.000000Z"}, {"uuid": "46996818-af31-4e88-894b-a8e1e335f2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.566491Z"}, {"uuid": "46605c2e-c6d7-458c-b27a-b7b323428715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30226", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:35.102628Z"}, {"uuid": "19138271-f7e3-413b-aa20-ea5039854277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.940910Z"}, {"uuid": "3cf91d3d-93d7-43d0-8b85-366ea40e17aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4893", "type": "seen", "source": "https://t.me/pphm_HackerNews/458", "content": "Hidden Risk in the Code Undermining System Trust\n\nCVE-2025-4893 identifies a use-after-free (UAF) vulnerability within the Linux kernel's OverlayFS module. The flaw arises when the dput() function is invoked prematurely in the ovl_link_up process, leading to potential access of freed memory in subsequent operations like ovl_dentry_update_reval. This mismanagement can result in system instability or exploitation by malicious actors.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.961568Z"}, {"uuid": "c94cfdb8-6e44-4c19-9fc6-3c8993ba0750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4893", "type": "seen", "source": "https://t.me/pphm_HackerNews/458", "content": "Hidden Risk in the Code Undermining System Trust\n\nCVE-2025-4893 identifies a use-after-free (UAF) vulnerability within the Linux kernel's OverlayFS module. The flaw arises when the dput() function is invoked prematurely in the ovl_link_up process, leading to potential access of freed memory in subsequent operations like ovl_dentry_update_reval. This mismanagement can result in system instability or exploitation by malicious actors.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:23.741313Z"}, {"uuid": "48d17bb7-fb1e-441c-9f5e-23450c7dcfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48933", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17079", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE vulnerabilities with recently published PoC repositories on GitHub, carefully selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2025-46812\n\ud83c\udfaf Apache OFBiz \u2013 Authentication Bypass / RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/axelp0l/CVE-2025-46812\n\n\ud83e\udde0 Overview\nA vulnerability in Apache OFBiz allows attackers to bypass authentication and potentially achieve remote code execution through crafted requests.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote code execution\n\u2022 Enterprise application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2025-45216\n\ud83c\udfaf Joomla Component \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/E1A/CVE-2025-45216\n\n\ud83e\udde0 Overview\nA vulnerable Joomla component allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Web server compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2025-44521\n\ud83c\udfaf Laravel Debug Mode Exposure\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xFay/CVE-2025-44521\n\n\ud83e\udde0 Overview\nA vulnerability in Laravel applications with debug mode enabled exposes sensitive environment variables and internal application data.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive data exposure\n\u2022 Credential leakage\n\u2022 Application compromise\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-48933\n\ud83c\udfaf Spring Boot Actuator \u2013 Unauthorized Access\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/WhooAmii/CVE-2025-48933\n\n\ud83e\udde0 Overview\nImproperly secured Spring Boot Actuator endpoints allow attackers to access internal application data and management functions.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Information disclosure\n\u2022 Potential system manipulation\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-47012\n\ud83c\udfaf Magento \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bugexploit/CVE-2025-47012\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in Magento allows attackers to execute arbitrary database queries through crafted input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Full application takeover\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development study\n\u2022 Patch analysis\n\u2022 Web application security research\n\u2022 Red team training\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.156458Z"}]}