{"metadata": {"vulnerability": "CVE-2025-29471", "count": 19, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-15T21:56:33.209Z", "date_only": false, "value": "2025-04-15T21:56:33.209Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-29471", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-15T22:15:25Z", "date_only": false, "value": "2025-04-15T22:15:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V943-7XRM-G7PR", "record": "GHSA-V943-7XRM-G7PR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-04-15T22:15:25.997Z", "date_only": false, "value": "2025-04-15T22:15:25.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29471", "record": "FKIE_CVE-2025-29471", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-15T22:43:12.274Z", "date_only": false, "value": "2025-04-15T22:43:12.274418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5meqk2t2r", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "addac4ad-2028-4bcc-8327-cf05a5dd3a7f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5meqk2t2r"}, {"timestamp": "2025-04-15T22:55:56Z", "date_only": false, "value": "2025-04-15T22:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11952", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "4b441f0e-c7c0-48b0-8546-361eda42170d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:56:33.209Z\n\ud83d\udd17 References:\n1. https://youtu.be/MvJuIkdTSQg\n2. https://www.nagios.com/changelog/#log-server\n3. https://www.exploit-db.com/exploits/52117", "url": "https://t.me/DarkWebInformer_CVEAlerts/11952", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-16T00:31:37Z", "date_only": false, "value": "2025-04-16T00:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V943-7XRM-G7PR", "record": "GHSA-V943-7XRM-G7PR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-16T01:01:37Z", "date_only": false, "value": "2025-04-16T01:01:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/16127", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "652366b7-b368-4515-b5c2-8df781decc20", "content": "\ud83d\udea8CVE-2025-29471: Stored XSS PoC\n\nCross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.\n\nCredit: youtube.com/@organics000", "url": "https://t.me/TheDarkWebInformer/16127", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-16T02:06:11Z", "date_only": false, "value": "2025-04-16T02:06:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CybNux/7833", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "58feb1f0-82e8-43aa-bd30-173d1112307f", "content": "\ud83d\udea8CVE-2025-29471: Stored XSS PoC\n\n\u062a\u0633\u0645\u062d \u062b\u063a\u0631\u0629 Cross Site Scripting \u0641\u064a Nagios Log Server v.2024R1.3.1 \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u0639\u062f \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0628\u0631 \u062d\u0645\u0648\u0644\u0629 \u0641\u064a \u062d\u0642\u0644 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a.", "url": "https://t.me/CybNux/7833", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-16T14:48:07.371Z", "date_only": false, "value": "2025-04-16T14:48:07.371880Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29471", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-16T14:48:07.371Z", "date_only": false, "value": "2025-04-16T14:48:07.371880Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29471", "record": "FKIE_CVE-2025-29471", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-16T18:31:29.672Z", "date_only": false, "value": "2025-04-16T18:31:29.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-16T18:31:29.672Z", "date_only": false, "value": "2025-04-16T18:31:29.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-29471", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-16T21:30:54Z", "date_only": false, "value": "2025-04-16T21:30:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V943-7XRM-G7PR", "record": "GHSA-V943-7XRM-G7PR", "field": "modified", "linked_record": true}, {"timestamp": "2025-08-09T13:26:57Z", "date_only": false, "value": "2025-08-09T13:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "45e0e1d8-87ef-4646-b643-e50bec8a1db6"}, {"timestamp": "2025-08-11T18:47:41Z", "date_only": false, "value": "2025-08-11T18:47:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "f72535f1-ad75-470a-9e33-86dc4f7d93fc"}, {"timestamp": "2026-06-17T09:05:25.047Z", "date_only": false, "value": "2026-06-17T09:05:25.047", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-29471", "record": "FKIE_CVE-2025-29471", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-04T22:00:04.465Z", "date_only": false, "value": "2026-09-04T22:00:04.465763Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101137", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "fc472b75-bb4c-4917-a1f9-9b16a6291411", "url": "https://t.me/GithubRedTeam/101137"}], "metrics": {"as_of": "2026-11-14T08:49:20.541Z", "anchors": {"origin": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-04-15T22:55:56Z", "date_only": false, "value": "2025-04-15T22:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11952", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "4b441f0e-c7c0-48b0-8546-361eda42170d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:56:33.209Z\n\ud83d\udd17 References:\n1. https://youtu.be/MvJuIkdTSQg\n2. https://www.nagios.com/changelog/#log-server\n3. https://www.exploit-db.com/exploits/52117", "url": "https://t.me/DarkWebInformer_CVEAlerts/11952", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 82556.0, "hours": 22.932222222222222, "days": 0.9555092592592592, "min_seconds": -3844.0, "max_seconds": 82556.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-15T22:55:56Z", "date_only": false, "value": "2025-04-15T22:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11952", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "4b441f0e-c7c0-48b0-8546-361eda42170d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:56:33.209Z\n\ud83d\udd17 References:\n1. https://youtu.be/MvJuIkdTSQg\n2. https://www.nagios.com/changelog/#log-server\n3. https://www.exploit-db.com/exploits/52117", "url": "https://t.me/DarkWebInformer_CVEAlerts/11952", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 49970960.541688, "hours": 13880.822372691111, "days": 578.3675988621296, "min_seconds": 49884560.541688, "max_seconds": 49970960.541688, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-29471", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T08:49:20.541Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 49888404.541688, "hours": 13857.89015046889, "days": 577.4120896028704, "min_seconds": 49888404.541688, "max_seconds": 49888404.541688, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T22:55:56Z", "date_only": false, "value": "2025-04-15T22:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11952", "record": "CVE-2025-29471", "field": "creation_timestamp", "uuid": "4b441f0e-c7c0-48b0-8546-361eda42170d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T21:56:33.209Z\n\ud83d\udd17 References:\n1. https://youtu.be/MvJuIkdTSQg\n2. https://www.nagios.com/changelog/#log-server\n3. https://www.exploit-db.com/exploits/52117", "url": "https://t.me/DarkWebInformer_CVEAlerts/11952", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T08:49:20.541Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}