{"metadata": {"vulnerability": "CVE-2025-25227", "count": 29, "kinds": {"milestone": 9, "sighting": 5, "kev": 0, "other": 15}}, "data": [{"timestamp": "2025-02-04T14:21:34.509Z", "date_only": false, "value": "2025-02-04T14:21:34.509Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-25227", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": true, "value": "2025-04-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0296", "record": "CERTFR-2025-AVI-0296", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0296", "record": "CERTFR-2025-AVI-0296", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-04-08T16:24:18.330Z", "date_only": false, "value": "2025-04-08T16:24:18.330Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-25227", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-08T16:46:31Z", "date_only": false, "value": "2025-04-08T16:46:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10942", "record": "CVE-2025-25227", "field": "creation_timestamp", "uuid": "388883d7-f229-4d5d-9083-950c01333a9b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25227\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient state checks lead to a vector that allows to bypass 2FA checks.\n\ud83d\udccf Published: 2025-04-08T16:24:18.330Z\n\ud83d\udccf Modified: 2025-04-08T16:24:18.330Z\n\ud83d\udd17 References:\n1. https://developer.joomla.org/security-centre/964-20250402-core-mfa-authentication-bypass.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/10942"}, {"timestamp": "2025-04-08T17:15:35Z", "date_only": false, "value": "2025-04-08T17:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6423-85CC-8GF6", "record": "GHSA-6423-85CC-8GF6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-08T17:15:35.610Z", "date_only": false, "value": "2025-04-08T17:15:35.610", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25227", "record": "FKIE_CVE-2025-25227", "field": "published"}, {"timestamp": "2025-04-08T18:34:43Z", "date_only": false, "value": "2025-04-08T18:34:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6423-85CC-8GF6", "record": "GHSA-6423-85CC-8GF6", "field": "published"}, {"timestamp": "2025-04-08T18:54:33.776Z", "date_only": false, "value": "2025-04-08T18:54:33.776174Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25227", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-08T18:54:33.776Z", "date_only": false, "value": "2025-04-08T18:54:33.776174Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25227", "record": "FKIE_CVE-2025-25227", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-08T18:56:15.635Z", "date_only": false, "value": "2025-04-08T18:56:15.635Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25227", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-08T19:51:39Z", "date_only": false, "value": "2025-04-08T19:51:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22487", "record": "CVE-2025-25227", "field": "creation_timestamp", "uuid": "05d84e55-b77e-439d-a18e-eed1ae93a7ba", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25227 - Microsoft Azure Authenticator Two-Factor Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-25227 \nPublished : April 8, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Insufficient state checks lead to a vector that allows to bypass 2FA checks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22487"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0740", "record": "WID-SEC-W-2025-0740", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0740", "record": "WID-SEC-W-2025-0740", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0740", "record": "WID-SEC-W-2025-0740", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0740", "record": "WID-SEC-W-2025-0740", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0296", "record": "CERTFR-2025-AVI-0296", "field": "last_revision_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0296", "record": "CERTFR-2025-AVI-0296", "field": "initial_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0296", "record": "CERTFR-2025-AVI-0296", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-09T08:20:14.982Z", "date_only": false, "value": "2025-04-09T08:20:14.982+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0740", "record": "WID-SEC-W-2025-0740", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-09T13:08:22Z", "date_only": false, "value": "2025-04-09T13:08:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6423-85CC-8GF6", "record": "GHSA-6423-85CC-8GF6", "field": "modified"}, {"timestamp": "2025-04-11T12:07:56Z", "date_only": false, "value": "2025-04-11T12:07:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/206", "record": "CVE-2025-25227", "field": "creation_timestamp", "uuid": "6eba99cb-b960-4f33-a647-2e9015e70eea", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/l3fmrvL8hO\n\n\ud83d\udea8\ud83d\udea8Two Critical Vulnerabilities in Joomla\n CVE-2025-25226: SQL injection flaw in quoteNameStr. Mishandled identifiers could let attackers manipulate your database.\nCVE-2025-25227: MFA bypass alert! Hackers could slip past multi-factor authentication, unlocking sensitive accounts.  \n\nZoomEye Dork\ud83d\udc49app=\"Joomla\"\nReveals 127.9k+ potentially exposed sites.\nZoomEye Link: https://t.co/deNA8NE7Fj\n\nRefer: https://t.co/yImcvH3thZ\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/206"}, {"timestamp": "2025-04-13T12:23:25.974Z", "date_only": false, "value": "2025-04-13T12:23:25.974383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp227v4vc2q", "record": "CVE-2025-25227", "field": "creation_timestamp", "uuid": "23cf4caa-cca8-47c2-b80e-fe9817278cbd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp227v4vc2q"}, {"timestamp": "2025-04-13T12:23:27.153Z", "date_only": false, "value": "2025-04-13T12:23:27.153752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp22c2wc22q", "record": "CVE-2025-25227", "field": "creation_timestamp", "uuid": "3a6c95dd-a7fd-45d6-8717-7fa649f2167d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmp22c2wc22q"}, {"timestamp": "2025-04-21T07:16:35.672Z", "date_only": false, "value": "2025-04-21T07:16:35.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-25227", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-21T07:16:35.672Z", "date_only": false, "value": "2025-04-21T07:16:35.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Joomla", "record": "CVE-2025-25227", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-05T05:48:56.271Z", "date_only": false, "value": "2025-06-05T05:48:56.271Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-JOOMLA-2025-25227", "record": "BIT-JOOMLA-2025-25227", "field": "published"}, {"timestamp": "2026-06-17T09:00:31.780Z", "date_only": false, "value": "2026-06-17T09:00:31.780", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25227", "record": "FKIE_CVE-2025-25227", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-JOOMLA-2025-25227", "record": "BIT-JOOMLA-2025-25227", "field": "modified"}]}