{"metadata": {"vulnerability": "CVE-2025-32028", "count": 13, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-04-01T21:57:32.957Z", "date_only": false, "value": "2025-04-01T21:57:32.957Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-32028", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-08T16:06:33.976Z", "date_only": false, "value": "2025-04-08T16:06:33.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32028", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-08T16:06:33.976Z", "date_only": false, "value": "2025-04-08T16:06:33.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-32028", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-08T16:15:28.180Z", "date_only": false, "value": "2025-04-08T16:15:28.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32028", "record": "FKIE_CVE-2025-32028", "field": "published"}, {"timestamp": "2025-04-08T16:46:45Z", "date_only": false, "value": "2025-04-08T16:46:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10954", "record": "CVE-2025-32028", "field": "creation_timestamp", "uuid": "0d7f4886-318c-4ec9-8fe0-85489779c646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32028\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: HAX CMS PHP allows you to manage your microsite universe with PHP backend. Multiple file upload functions within the HAX CMS PHP application call a \u2019save\u2019 function in \u2019HAXCMSFile.php\u2019. This save function uses a denylist to block specific file types from being uploaded to the server. This list is non-exhaustive and only blocks \u2019.php\u2019, \u2019.sh\u2019, \u2019.js\u2019, and \u2019.css\u2019 files. The existing logic causes the system to \"fail open\" rather than \"fail closed.\" This vulnerability is fixed in 10.0.3.\n\ud83d\udccf Published: 2025-04-08T16:06:33.976Z\n\ud83d\udccf Modified: 2025-04-08T16:06:33.976Z\n\ud83d\udd17 References:\n1. https://github.com/haxtheweb/issues/security/advisories/GHSA-vj5q-3jv2-cg5p", "url": "https://t.me/DarkWebInformer_CVEAlerts/10954"}, {"timestamp": "2025-04-08T17:40:20.179Z", "date_only": false, "value": "2025-04-08T17:40:20.179916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgetxro2h", "record": "CVE-2025-32028", "field": "creation_timestamp", "uuid": "dd95d252-d3d0-439f-9008-14f74abc857a", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmczgetxro2h"}, {"timestamp": "2025-04-08T17:48:13.910Z", "date_only": false, "value": "2025-04-08T17:48:13.910392Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114303598091230128", "record": "CVE-2025-32028", "field": "creation_timestamp", "uuid": "728aef20-439c-4822-a2d0-d719cd2416d6", "url": "https://mastodon.social/users/CyberSignaler/statuses/114303598091230128"}, {"timestamp": "2025-04-08T19:22:39.378Z", "date_only": false, "value": "2025-04-08T19:22:39.378993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756er5p2b", "record": "CVE-2025-32028", "field": "creation_timestamp", "uuid": "38bcd490-822b-40a4-884f-29093d5c361c", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756er5p2b"}, {"timestamp": "2025-04-08T20:00:29.017Z", "date_only": false, "value": "2025-04-08T20:00:29.017786Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32028", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-08T20:00:29.017Z", "date_only": false, "value": "2025-04-08T20:00:29.017786Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32028", "record": "FKIE_CVE-2025-32028", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-08T20:00:56.916Z", "date_only": false, "value": "2025-04-08T20:00:56.916Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-32028", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-08T20:00:56.916Z", "date_only": false, "value": "2025-04-08T20:00:56.916Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32028", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:11:20.797Z", "date_only": false, "value": "2026-06-17T09:11:20.797", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32028", "record": "FKIE_CVE-2025-32028", "field": "lastModified"}]}