{"metadata": {"vulnerability": "CVE-2025-29306", "count": 49, "kinds": {"milestone": 4, "sighting": 26, "kev": 11, "other": 8}}, "data": [{"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-29306", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29306", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-27T19:00:45.447Z", "date_only": false, "value": "2025-03-27T19:00:45.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-29306", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-27T19:15:49Z", "date_only": false, "value": "2025-03-27T19:15:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8GWJ-X84V-J8CC", "record": "GHSA-8GWJ-X84V-J8CC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-27T19:15:49.290Z", "date_only": false, "value": "2025-03-27T19:15:49.290", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29306", "record": "FKIE_CVE-2025-29306", "field": "published"}, {"timestamp": "2025-03-27T20:50:25Z", "date_only": false, "value": "2025-03-27T20:50:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21333", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "41ec9133-11be-4c61-89ce-fe2b4d1a37c3", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29306 - FoxCMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29306 \nPublished : March 27, 2025, 7:15 p.m. | 28\u00a0minutes ago \nDescription : An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21333"}, {"timestamp": "2025-03-27T21:31:21Z", "date_only": false, "value": "2025-03-27T21:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8GWJ-X84V-J8CC", "record": "GHSA-8GWJ-X84V-J8CC", "field": "published"}, {"timestamp": "2025-03-28T15:28:51.622Z", "date_only": false, "value": "2025-03-28T15:28:51.622945Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29306", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-28T15:28:51.622Z", "date_only": false, "value": "2025-03-28T15:28:51.622945Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29306", "record": "FKIE_CVE-2025-29306", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-28T15:29:51.703Z", "date_only": false, "value": "2025-03-28T15:29:51.703Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-29306", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-28T15:29:51.703Z", "date_only": false, "value": "2025-03-28T15:29:51.703Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29306", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-28T18:33:21Z", "date_only": false, "value": "2025-03-28T18:33:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8GWJ-X84V-J8CC", "record": "GHSA-8GWJ-X84V-J8CC", "field": "modified"}, {"timestamp": "2025-04-17T10:18:23.581Z", "date_only": false, "value": "2025-04-17T10:18:23.581427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lmyuweu2gf24", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "e9905597-b532-4c94-8184-2ac3317630db", "url": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3lmyuweu2gf24"}, {"timestamp": "2025-04-18T13:44:02.957Z", "date_only": false, "value": "2025-04-18T13:44:02.957556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3ln3quw3ikk2q", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "3b113e27-5823-4874-b936-a3a53a405219", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3ln3quw3ikk2q"}, {"timestamp": "2025-04-20T21:02:11.470Z", "date_only": false, "value": "2025-04-20T21:02:11.470056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnbkcd7tzh2y", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "f131bfbf-bfea-4609-a407-fb6c881cbb21", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnbkcd7tzh2y"}, {"timestamp": "2025-04-23T06:59:43Z", "date_only": false, "value": "2025-04-23T06:59:43.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-29306.yaml", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "f42da9fe-d5c2-478e-8bea-8aa89c182eda", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-29306.yaml"}, {"timestamp": "2025-04-24T21:02:20.656Z", "date_only": false, "value": "2025-04-24T21:02:20.656937Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnlm6a54tr2y", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "8d3828a0-9a97-4fee-9152-563294f1d165", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnlm6a54tr2y"}, {"timestamp": "2025-04-25T03:48:46Z", "date_only": false, "value": "2025-04-25T03:48:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34127", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "10d2107c-fb41-4d8c-b2f1-ddb307f3130e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.\nURL\uff1ahttps://github.com/Mattb709/CVE-2025-29306-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34127"}, {"timestamp": "2025-04-25T13:46:48Z", "date_only": false, "value": "2025-04-25T13:46:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34188", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "208335c4-af79-486f-89e2-ea9595b37294", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aProof-of-Concept (PoC) for CVE-2025-29306, a Remote Code Execution vulnerability in FoxCMS. This Python script scans single or multiple targets, executes commands, and reports vulnerable hosts.\nURL\uff1ahttps://github.com/Mattb709/CVE-2025-29306-PoC-FoxCMS-RCE\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/34188"}, {"timestamp": "2025-04-28T11:29:53.631Z", "date_only": false, "value": "2025-04-28T11:29:53.631020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3lnuo2evye22e", "record": "cve-2025-29306", "field": "creation_timestamp", "uuid": "62612e6c-131c-4ae7-8488-d674048add2a", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3lnuo2evye22e"}, {"timestamp": "2025-07-03T19:04:35Z", "date_only": false, "value": "2025-07-03T19:04:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/53804", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "1b1f9a48-d98d-485a-9ffd-c895ff43d2ac", "content": "CVE-2025-29306 \u2013 Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injection\nhttps://www.offsec.com/blog/cve-2025-29306/\n\nDiscover details about CVE-2025-29306, a critical RCE vulnerability in FoxCMS 1.2.5. Learn how unsafe use of PHP's unserialize() function enables remote attackers to execute arbitrary system commands.\nThe post CVE-2025-29306 \u2013 Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injection (https://www.offsec.com/blog/cve-2025-29306/) appeared first on OffSec (https://www.offsec.com/).", "url": "https://t.me/information_security_channel/53804"}, {"timestamp": "2025-08-06T13:54:20Z", "date_only": false, "value": "2025-08-06T13:54:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "d9f93172-dd6e-47e6-b7e0-366b019db809"}, {"timestamp": "2025-08-14T11:44:22Z", "date_only": false, "value": "2025-08-14T11:44:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "3b65c22f-2ae6-4038-915c-655a97e02a88"}, {"timestamp": "2025-09-18T04:54:54Z", "date_only": false, "value": "2025-09-18T04:54:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52082", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "ad616a35-f037-45a8-92ab-cb22ae751c4a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.\nURL\uff1ahttps://github.com/amalpvatayam67/day06-foxcms-rce\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52082"}, {"timestamp": "2025-09-18T05:16:00Z", "date_only": false, "value": "2025-09-18T05:16:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52085", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "0bf020e1-db24-4068-b67b-9c0e8e47b821", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis tiny lab simulates the core idea behind CVE-2025-29306: unsafe use of `unserialize()` on attacker-controlled input leading to remote code execution.\nURL\uff1ahttps://github.com/amalpvatayam67/day06-foxcms-rce\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52085"}, {"timestamp": "2025-09-18T09:00:04Z", "date_only": false, "value": "2025-09-18T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2VpkGdUNjYoarYnol6Z9IkHtEM3-uUmyArzNM6QRuvSvsgQ", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "8042eaab-1faf-43d4-92b0-a1787bd43f59"}, {"timestamp": "2025-11-26T18:17:47Z", "date_only": false, "value": "2025-11-26T18:17:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/60874", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "6918ec78-9ebd-4824-8c49-b16a7fafc320", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-29306\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-29306\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/60874"}, {"timestamp": "2025-11-26T21:00:05Z", "date_only": false, "value": "2025-11-26T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EQSEx6hVvMlnJ1ky7huxK4eSzyICfuehitJwgPSzGmUZN8M", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "e46ada56-8578-43e4-ba3b-4bc0e850f16e"}, {"timestamp": "2026-01-07T09:00:05Z", "date_only": false, "value": "2026-01-07T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/f9DwH0E8ALLwHquXU-kVirANbqvX23Jli4fOZF7oeW-0l1Q", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "f8a3d26a-7e6e-44d7-a813-797da7ae6d87"}, {"timestamp": "2026-06-17T09:05:15.660Z", "date_only": false, "value": "2026-06-17T09:05:15.660", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29306", "record": "FKIE_CVE-2025-29306", "field": "lastModified"}, {"timestamp": "2026-08-27T15:00:13.380Z", "date_only": false, "value": "2026-08-27T15:00:13.380175Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cve0day/223", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "3e538cd3-80b2-4a9f-b1ce-dd54b7fed745", "url": "https://t.me/cve0day/223"}, {"timestamp": "2026-08-29T00:00:29.845Z", "date_only": false, "value": "2026-08-29T00:00:29.845318Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cve0day/223", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "c714fe20-7bb4-4702-a544-93c1dfef260d", "url": "https://t.me/cve0day/223"}, {"timestamp": "2026-09-01T20:00:24.461Z", "date_only": false, "value": "2026-09-01T20:00:24.461905Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/158589", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "6892db34-6913-481a-82b3-9a5962ba2130", "url": "https://t.me/hacking_Attack/158589"}, {"timestamp": "2026-09-01T20:00:24.504Z", "date_only": false, "value": "2026-09-01T20:00:24.504032Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/158591", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "20da2b8c-b810-489e-a696-1d5b87ee4bd3", "url": "https://t.me/hacking_Attack/158591"}, {"timestamp": "2026-09-03T10:00:03.458Z", "date_only": false, "value": "2026-09-03T10:00:03.458992Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/158591", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "7d282174-9689-4323-9adf-a2df5f98ccb5", "url": "https://t.me/hacking_Attack/158591"}, {"timestamp": "2026-09-03T10:00:03.504Z", "date_only": false, "value": "2026-09-03T10:00:03.504921Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/158589", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "fa7d794b-3f14-4b63-ba3d-228feace2beb", "url": "https://t.me/hacking_Attack/158589"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2025-29306", "field": "timestamps.asserted_at", "uuid": "5e3e8e04-2265-4a00-85b1-d725abc09ad2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2025-29306", "field": "evidence.0.details.added_date", "uuid": "5e3e8e04-2265-4a00-85b1-d725abc09ad2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2025-29306", "field": "timestamps.first_seen_at", "uuid": "5e3e8e04-2265-4a00-85b1-d725abc09ad2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": false, "value": "2026-10-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2025-29306", "field": "status.status_updated_at", "uuid": "5e3e8e04-2265-4a00-85b1-d725abc09ad2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T20:11:31Z", "date_only": false, "value": "2026-10-05T20:11:31+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-29306", "field": "timestamps.asserted_at", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-05T20:11:31Z", "date_only": false, "value": "2026-10-05T20:11:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-29306", "field": "timestamps.first_seen_at", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T11:00:02Z", "date_only": false, "value": "2026-10-06T11:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2025-29306", "field": "timestamps.recorded_at", "uuid": "5e3e8e04-2265-4a00-85b1-d725abc09ad2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-06T11:00:37.359Z", "date_only": false, "value": "2026-10-06T11:00:37.359878Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5e3e8e04-2265-4a00-85b1-d725abc09ad2", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "a4a14f2e-8fa9-4c02-a37c-424221999a11", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5e3e8e04-2265-4a00-85b1-d725abc09ad2"}, {"timestamp": "2026-10-21T09:13:46.582Z", "date_only": false, "value": "2026-10-21T09:13:46.582673Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "record": "CVE-2025-29306", "field": "creation_timestamp", "uuid": "2393bb1f-f5ad-4148-9735-f83edbb8cf8b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e3e9dc65-dfb1-49ca-8334-2f90b51a6e13"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-29306", "field": "timestamps.last_seen_at", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-29306", "field": "evidence.0.details.observation_date", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-29306", "field": "status.status_updated_at", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-29306", "field": "timestamps.recorded_at", "uuid": "e3e9dc65-dfb1-49ca-8334-2f90b51a6e13", "status": {"status_reason": "confirmed", "exploited": true}}]}