{"metadata": {"vulnerability": "CVE-2025-2748", "count": 43, "kinds": {"milestone": 4, "sighting": 29, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-03-24T16:39:15.399Z", "date_only": false, "value": "2025-03-24T16:39:15.399Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-24T18:33:54.247Z", "date_only": false, "value": "2025-03-24T18:33:54.247485Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2748", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-24T18:33:54.247Z", "date_only": false, "value": "2025-03-24T18:33:54.247485Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2748", "record": "FKIE_CVE-2025-2748", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-24T18:34:07.933Z", "date_only": false, "value": "2025-03-24T18:34:07.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2748", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-24T19:15:52Z", "date_only": false, "value": "2025-03-24T19:15:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FX68-23VP-XPXR", "record": "GHSA-FX68-23VP-XPXR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-24T19:15:52.270Z", "date_only": false, "value": "2025-03-24T19:15:52.270", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2748", "record": "FKIE_CVE-2025-2748", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T21:30:33Z", "date_only": false, "value": "2025-03-24T21:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FX68-23VP-XPXR", "record": "GHSA-FX68-23VP-XPXR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-24T22:35:05Z", "date_only": false, "value": "2025-03-24T22:35:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20993", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "84ed7204-eb5a-469b-acf7-f09d257845b5", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2748 - Kentico Xperience Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2748 \nPublished : March 24, 2025, 7:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : The\u00a0Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload functionality, which allows for stored XSS.This issue affects Kentico Xperience through 13.0.178. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20993"}, {"timestamp": "2025-03-24T22:39:52.718Z", "date_only": false, "value": "2025-03-24T22:39:52.718304Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t66rlpk2e", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "198f7ba7-380b-4ca5-9f3b-8a9afb8cd167", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll5t66rlpk2e"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-05136", "record": "CNVD-2026-05136", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-04-01T10:13:14.076Z", "date_only": false, "value": "2025-04-01T10:13:14.076330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llqn6gkph42j", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "3a047c5d-7a0d-4d9f-a368-0b8fc09a0e05", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3llqn6gkph42j"}, {"timestamp": "2025-04-01T10:39:32.813Z", "date_only": false, "value": "2025-04-01T10:39:32.813239Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3llqonigods2h", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "c5b6d5aa-0eab-4ad5-92bc-d23ac605e09a", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3llqonigods2h"}, {"timestamp": "2025-04-01T11:21:05.092Z", "date_only": false, "value": "2025-04-01T11:21:05.092566Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "url": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-01T11:43:43Z", "date_only": false, "value": "2025-04-01T11:43:43.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2748.yaml", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "a81573ff-3ee5-4b1b-95a2-db4154ea9efa", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2748.yaml"}, {"timestamp": "2025-04-01T13:52:41.797Z", "date_only": false, "value": "2025-04-01T13:52:41.797494Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263035807744605", "record": "cve-2025-2748", "field": "creation_timestamp", "uuid": "45020f5d-b3c0-49af-a902-d5b64f5b01ca", "url": "https://infosec.exchange/users/cR0w/statuses/114263035807744605"}, {"timestamp": "2025-04-01T13:52:41.798Z", "date_only": false, "value": "2025-04-01T13:52:41.798402Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114263035807744605", "record": "cve-2025-2748", "field": "creation_timestamp", "uuid": "e38d1ed8-5946-4e52-9637-551ee9cf7bf3", "url": "https://infosec.exchange/users/cR0w/statuses/114263035807744605"}, {"timestamp": "2025-04-01T16:02:26.118Z", "date_only": false, "value": "2025-04-01T16:02:26.118131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mariusavram.bsky.social/post/3llraotyeds2c", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "08394e74-0232-42d4-9ec4-7b72948e74ef", "url": "https://bsky.app/profile/mariusavram.bsky.social/post/3llraotyeds2c"}, {"timestamp": "2025-04-01T19:46:54.880Z", "date_only": false, "value": "2025-04-01T19:46:54.880271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3llrnab35ic2g", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "214e24b4-e5f6-4cc1-9e5a-9090805d4f3c", "url": "https://bsky.app/profile/aakl.bsky.social/post/3llrnab35ic2g"}, {"timestamp": "2025-04-02T09:30:37Z", "date_only": false, "value": "2025-04-02T09:30:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/452", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "da58a5c5-9080-485c-aec6-a4a048355b5f", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-02T11:23:59Z", "date_only": false, "value": "2025-04-02T11:23:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/04/02/xss-to-rce-by-abusing.html", "record": "cve-2025-2748", "field": "creation_timestamp", "uuid": "f3495510-cd03-418c-9937-805f2ed0ab73", "url": "https://threatintel.cc/2025/04/02/xss-to-rce-by-abusing.html"}, {"timestamp": "2025-04-02T11:52:28.049Z", "date_only": false, "value": "2025-04-02T11:52:28.049592Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lltd6r6nws26", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "5a74c974-fcae-4499-9f85-22cb5450beb9", "url": "https://bsky.app/profile/samilaiho.com/post/3lltd6r6nws26"}, {"timestamp": "2025-04-02T21:02:22.667Z", "date_only": false, "value": "2025-04-02T21:02:22.667912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llubw2ytye2v", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "4cb1664d-2423-44d6-a738-d39ee145a40e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llubw2ytye2v"}, {"timestamp": "2025-04-05T15:54:32.341Z", "date_only": false, "value": "2025-04-05T15:54:32.341930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lm3c4gfjk62c", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "85c8af35-17a5-4cd5-b7b9-07d3490865c6", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lm3c4gfjk62c"}, {"timestamp": "2025-04-06T07:38:01Z", "date_only": false, "value": "2025-04-06T07:38:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10632", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "89c4a411-ec02-4208-98ee-5372298b870d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32370\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extensions. NOTE: this is a separate issue not necessarily related to SVG or XSS.\n\ud83d\udccf Published: 2025-04-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-06T06:50:42.609Z\n\ud83d\udd17 References:\n1. https://devnet.kentico.com/download/hotfixes\n2. https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "url": "https://t.me/DarkWebInformer_CVEAlerts/10632"}, {"timestamp": "2025-04-06T10:00:59Z", "date_only": false, "value": "2025-04-06T10:00:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UniB57STuDvdE48xUY8fEONrPJBrVxr-UljY-0_y9mj8GYk", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "590892c9-4ad0-46fe-b701-a22673d0476d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-07T16:10:19Z", "date_only": false, "value": "2025-04-07T16:10:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/12011", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "6b8ab760-8716-4d1b-bd6c-051a15352240", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "url": "https://t.me/CyberSecurityTechnologies/12011", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-07T22:30:57Z", "date_only": false, "value": "2025-04-07T22:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9788", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "f1052f15-9f1f-461e-9fb0-e5db78deba16", "content": "XSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748)\n\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "url": "https://t.me/thebugbountyhunter/9788", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-10T12:05:52Z", "date_only": false, "value": "2025-04-10T12:05:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/3505", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "e8f21150-f6d5-47cf-8f1b-967527ae7f4e", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "url": "https://t.me/ton618cyber/3505", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-10T12:05:52Z", "date_only": false, "value": "2025-04-10T12:05:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/8800", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "8598dace-0b04-49a9-a0d6-675d6ac8c23a", "content": "#exploit\n1. CVE-2025-2748:\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS\nhttps://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748\n\n2. CVE-2025-44228:\nAnyDesk RCE PoC\nhttps://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n3. CVE-2025-30065:\nApache Parquet RCE\nhttps://github.com/ron-imperva/CVE-2025-30065-PoC", "url": "https://t.me/ton618cyber/8800", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-23T22:45:54.540Z", "date_only": false, "value": "2025-04-23T22:45:54.540079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/c1b3r53cur1ty.bsky.social/post/3lnjbikz2xw2f", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "a0270941-8192-4770-affe-d20d8c5bb2bd", "url": "https://bsky.app/profile/c1b3r53cur1ty.bsky.social/post/3lnjbikz2xw2f"}, {"timestamp": "2025-05-09T18:53:15Z", "date_only": false, "value": "2025-05-09T18:53:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/36177", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "ec111b71-a8ae-486a-950e-34f867b620ed", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-2748 - Unauthenticated ZIP file upload with embedded SVG for XSS\nURL\uff1ahttps://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/36177", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-09T17:25:37Z", "date_only": false, "value": "2025-08-09T17:25:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "d30281d3-d769-47bf-8998-18fe995e8b8f"}, {"timestamp": "2025-08-30T01:05:55Z", "date_only": false, "value": "2025-08-30T01:05:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/69", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "1e192b96-6b84-4eea-a561-b5e476d69111", "url": "https://t.me/realcodeb0ss/69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-10T07:00:38Z", "date_only": false, "value": "2025-09-10T07:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "82dede49-98da-4357-9ec5-74f1fd608312"}, {"timestamp": "2025-09-22T21:30:17Z", "date_only": false, "value": "2025-09-22T21:30:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FX68-23VP-XPXR", "record": "GHSA-FX68-23VP-XPXR", "field": "modified", "linked_record": true}, {"timestamp": "2025-12-27T16:47:39.767Z", "date_only": false, "value": "2025-12-27T16:47:39.767Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-12-27T16:47:39.767Z", "date_only": false, "value": "2025-12-27T16:47:39.767Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-2748", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": true, "value": "2026-01-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-05136", "record": "CNVD-2026-05136", "field": "openTime", "linked_record": true}, {"timestamp": "2026-06-17T09:07:33.320Z", "date_only": false, "value": "2026-06-17T09:07:33.320", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2748", "record": "FKIE_CVE-2025-2748", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-14T16:00:20.367Z", "date_only": false, "value": "2026-08-14T16:00:20.367314Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/456", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "9ae502ae-8856-4055-ba4f-6224e4e390e0", "url": "https://t.me/purp_sec/456"}, {"timestamp": "2026-09-22T05:00:04.792Z", "date_only": false, "value": "2026-09-22T05:00:04.792350Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/138", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "c51becb2-fc3e-4e23-a4ca-bffc212c11aa", "url": "https://t.me/Noheartz1337/138"}, {"timestamp": "2026-09-22T05:00:05.170Z", "date_only": false, "value": "2026-09-22T05:00:05.170665Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Noheartz1337/129", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "34d8111f-a291-4d3b-9159-b35137264305", "url": "https://t.me/Noheartz1337/129"}], "metrics": {"as_of": "2026-11-11T23:43:13.529Z", "anchors": {"origin": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-04-02T09:30:37Z", "date_only": false, "value": "2025-04-02T09:30:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/452", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "da58a5c5-9080-485c-aec6-a4a048355b5f", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-04-01T11:21:05.092Z", "date_only": false, "value": "2025-04-01T11:21:05.092566Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "url": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 665914.358, "hours": 184.97621055555555, "days": 7.707342106481482, "min_seconds": 665914.358, "max_seconds": 665914.358, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-01T11:21:05.092Z", "date_only": false, "value": "2025-04-01T11:21:05.092566Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "url": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 665914.358, "hours": 184.97621055555555, "days": 7.707342106481482, "min_seconds": 665914.358, "max_seconds": 665914.358, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-01T11:21:05.092Z", "date_only": false, "value": "2025-04-01T11:21:05.092566Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "url": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 745686.266, "hours": 207.13507388888888, "days": 8.630628078703703, "min_seconds": 745686.266, "max_seconds": 745686.266, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-02T09:30:37Z", "date_only": false, "value": "2025-04-02T09:30:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/452", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "da58a5c5-9080-485c-aec6-a4a048355b5f", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51600042.795599, "hours": 14333.345220999721, "days": 597.2227175416551, "min_seconds": 51600042.795599, "max_seconds": 51600042.795599, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-24T18:22:30.734Z", "date_only": false, "value": "2025-03-24T18:22:30.734Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2748", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T23:43:13.529Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 50934128.437599, "hours": 14148.369010444168, "days": 589.5153754351736, "min_seconds": 50934128.437599, "max_seconds": 50934128.437599, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-01T11:21:05.092Z", "date_only": false, "value": "2025-04-01T11:21:05.092566Z", "kind": "sighting", "label": "Exploited", "source": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "0482fbc0-56e1-44b7-99e1-b9fca469872e", "url": "https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T23:43:13.529Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 50854356.529599, "hours": 14126.210147110834, "days": 588.5920894629514, "min_seconds": 50854356.529599, "max_seconds": 50854356.529599, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-02T09:30:37Z", "date_only": false, "value": "2025-04-02T09:30:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/452", "record": "CVE-2025-2748", "field": "creation_timestamp", "uuid": "da58a5c5-9080-485c-aec6-a4a048355b5f", "content": "Top Security News for Today\n\nJapan Passes Active Cyber Defense Bill  \nhttps://www.tripwire.com/state-of-security/japan-passes-active-cyber-defense-bill\n\nTop Cybersecurity Considerations When Moving Commercial Premises  \nhttps://www.tripwire.com/state-of-security/top-cybersecurity-considerations-when-moving-commercial-premises\n\nReforging Sliver: How Simple Code Edits Can Outmaneuver EDR  \nhttps://www.reddit.com/r/netsec/comments/1joqvup/reforging_sliver_how_simple_code_edits_can/\n\nHarnessing the Power of Named Pipes  \nhttps://www.reddit.com/r/netsec/comments/1jor8nr/harnessing_the_power_of_named_pipes/\n\nCrushFTP Authentication Bypass - CVE-2025-2825 \u2014 ProjectDiscovery Blog  \nhttps://www.reddit.com/r/netsec/comments/1jopz93/crushftp_authentication_bypass_cve20252825/\n\nCell Phone OPSEC for Border Crossings  \nhttps://www.schneier.com/blog/archives/2025/04/cell-phone-opsec-for-border-crossings.html\n\nXSS To RCE By Abusing Custom File Handlers - Kentico Xperience CMS (CVE-2025-2748) - watchTowr Labs  \nhttps://www.reddit.com/r/netsec/comments/1jos2z2/xss_to_rce_by_abusing_custom_file_handlers/\n\nWhen Parameterization Fails: SQL Injection in Nim's db_postgres Module Using Parameterized Queries  \nhttps://www.reddit.com/r/netsec/comments/1joth41/when_parameterization_fails_sql_injection_in_nims/\n\nTransforming Public Sector Security Operations in the AI Era  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/01/transforming-public-sector-security-operations-in-the-ai-era/\n\nImproved Detection Signature for the K8s IngressNightmare Vulnerability  \nhttps://www.reddit.com/r/netsec/comments/1jp9cmt/improved_detection_signature_for_the_k8s/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/452", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T23:43:13.529Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}