{"metadata": {"vulnerability": "CVE-2025-34509", "count": 50, "kinds": {"milestone": 5, "sighting": 22, "kev": 11, "other": 12}}, "data": [{"timestamp": "2025-04-15T19:15:22.612Z", "date_only": false, "value": "2025-04-15T19:15:22.612Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-34509", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-17T18:20:57.441Z", "date_only": false, "value": "2025-06-17T18:20:57.441Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-34509", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-17T18:38:15Z", "date_only": false, "value": "2025-06-17T18:38:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18645", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "e6f0c7a3-d8bc-4d73-b626-1cd022f71ddc", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34509\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.\n\ud83d\udccf Published: 2025-06-17T18:20:57.441Z\n\ud83d\udccf Modified: 2025-06-17T18:20:57.441Z\n\ud83d\udd17 References:\n1. https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/", "url": "https://t.me/DarkWebInformer_CVEAlerts/18645"}, {"timestamp": "2025-06-17T18:55:29.013Z", "date_only": false, "value": "2025-06-17T18:55:29.013462Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114700224333418901", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "f828679e-12e6-4465-b4ca-b7ed14bc822a", "url": "https://infosec.exchange/users/cR0w/statuses/114700224333418901"}, {"timestamp": "2025-06-17T18:56:21.899Z", "date_only": false, "value": "2025-06-17T18:56:21.899782Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114700227776080528", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "d763ec49-a83b-45c6-b65d-05902cb6b121", "url": "https://infosec.exchange/users/cR0w/statuses/114700227776080528"}, {"timestamp": "2025-06-17T19:15:31Z", "date_only": false, "value": "2025-06-17T19:15:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G93F-92GJ-4Q4X", "record": "GHSA-G93F-92GJ-4Q4X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-17T19:15:31.423Z", "date_only": false, "value": "2025-06-17T19:15:31.423", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34509", "record": "FKIE_CVE-2025-34509", "field": "published"}, {"timestamp": "2025-06-17T21:32:29Z", "date_only": false, "value": "2025-06-17T21:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G93F-92GJ-4Q4X", "record": "GHSA-G93F-92GJ-4Q4X", "field": "published"}, {"timestamp": "2025-06-17T21:56:42.791Z", "date_only": false, "value": "2025-06-17T21:56:42.791760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrtifazl3q2u", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "cf044439-5312-40fc-a630-19961695ea51", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrtifazl3q2u"}, {"timestamp": "2025-06-17T22:00:00Z", "date_only": false, "value": "2025-06-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1345", "record": "WID-SEC-W-2025-1345", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-06-17T22:00:00Z", "date_only": false, "value": "2025-06-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1345", "record": "WID-SEC-W-2025-1345", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-06-17T22:00:00Z", "date_only": false, "value": "2025-06-17T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1345", "record": "WID-SEC-W-2025-1345", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-06-17T22:00:00Z", "date_only": false, "value": "2025-06-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1345", "record": "WID-SEC-W-2025-1345", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-18T03:56:10.468Z", "date_only": false, "value": "2025-06-18T03:56:10.468989Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-34509", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-18T03:56:10.468Z", "date_only": false, "value": "2025-06-18T03:56:10.468989Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34509", "record": "FKIE_CVE-2025-34509", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-18T10:00:29.507Z", "date_only": false, "value": "2025-06-18T10:00:29.507+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1345", "record": "WID-SEC-W-2025-1345", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-20T06:59:26.197Z", "date_only": false, "value": "2025-06-20T06:59:26.197260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r1cksec.bsky.social/post/3lrzhnis6ik2o", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "11dfb804-4e69-4cc5-9194-4b4d69d33ca7", "url": "https://bsky.app/profile/r1cksec.bsky.social/post/3lrzhnis6ik2o"}, {"timestamp": "2025-06-20T13:42:29.047Z", "date_only": false, "value": "2025-06-20T13:42:29.047186Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114715980209222917", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "3eee8ce0-6085-4a48-8fe3-363ca697e08d", "url": "https://mstdn.ca/users/rfwaveio/statuses/114715980209222917"}, {"timestamp": "2025-07-22T15:32:23Z", "date_only": false, "value": "2025-07-22T15:32:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G93F-92GJ-4Q4X", "record": "GHSA-G93F-92GJ-4Q4X", "field": "modified"}, {"timestamp": "2025-08-29T11:19:27.666Z", "date_only": false, "value": "2025-08-29T11:19:27.666289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lxjwsxkfqc27", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "13ec2746-345b-4409-8484-deab67989a6a", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lxjwsxkfqc27"}, {"timestamp": "2025-08-29T14:35:14.031Z", "date_only": false, "value": "2025-08-29T14:35:14.031634Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/b0453b3f-aa70-494d-8cbf-b4217e22de4a", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "3d850792-bebe-4d84-a2b3-a8cdd73f5bdb", "url": "https://vulnerability.circl.lu/bundle/b0453b3f-aa70-494d-8cbf-b4217e22de4a"}, {"timestamp": "2025-10-11T12:01:40Z", "date_only": false, "value": "2025-10-11T12:01:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1651", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "63e218db-3a47-4b79-a686-e156f3ba01ba", "content": "\u2623\ufe0f \u041e\u0434\u0438\u043d HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f DoS, \u0438\u043b\u0438 \u043a\u0430\u043a CVE-2025-3600 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 RCE\n\n\u0412\u0447\u0435\u0440\u0430 watchTowr Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441\u0432\u0435\u0436\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-3600 \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX \u2014 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0432\u0435\u0431-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 .NET. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0442\u043e DoS, \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u0443\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435.\n\n\ud83d\udd0e \u0412 \u0447\u0435\u043c \u0441\u0443\u0442\u044c? \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Unsafe Reflection \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 prtype \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u043a /Telerik.Web.UI.WebResource.axd. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0432 Type.GetType() \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0447\u0435\u0440\u0435\u0437 \u0435\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 \u0431\u0435\u0437 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432. \u0417\u0432\u0443\u0447\u0438\u0442 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u043e? \u041d\u0435 \u0441\u043e\u0432\u0441\u0435\u043c.\n\n\ud83d\udca5 DoS \u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438: \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0433\u0430\u0434\u0436\u0435\u0442 \u0438\u0437 .NET Framework (System.Management.Automation.Remoting.WSManPluginManagedEntryInstanceWrapper), \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0448 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e\u0434\u043d\u0438\u043c HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c. \u041a\u043e\u0433\u0434\u0430 Garbage Collector \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u043e\u0431\u044a\u0435\u043a\u0442, \u0444\u0438\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 handle \u2014 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435, \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u0430\u0434\u0430\u0435\u0442. \u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043a\u0430\u0436\u0434\u044b\u0435 2 \u043c\u0438\u043d\u0443\u0442\u044b \u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432 \u043e\u0444\u043b\u0430\u0439\u043d\u0435.\n\n\u26a1\ufe0f \u041d\u043e \u044d\u0442\u043e \u043d\u0435 \u0432\u0441\u0451! \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a Remote Code Execution. \u041a\u0430\u043a? \u041a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u044b \u0431\u0435\u0437 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043c\u043e\u0433\u0443\u0442:\n- \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 query-\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, cookies \u0438\u043b\u0438 headers\n- \u0414\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0443\u0442\u0435\u0439\n- \u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 assembly resolvers \u0432 AppDomain.AssemblyResolve\n\n\ud83c\udfaf \u0416\u0438\u0432\u043e\u0439 \u043f\u0440\u0438\u043c\u0435\u0440: watchTowr \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 pre-auth RCE-\u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432 Sitecore Experience Platform. CVE-2025-3600 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e assembly resolver, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e DLL \u0441 path traversal. \u0412 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u0441 CVE-2025-34509 (bypass \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438) \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u044b: \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u041f\u0440\u043e\u0441\u0442\u043e\u0439 \u043f\u043e\u0438\u0441\u043a \u0432 FOFA \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 ~185,000 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 14 \u043b\u0435\u0442. Telerik UI \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0430\u0433\u043e\u0432 (CVE-2017-9248, CVE-2019-18935), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c? Progress \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043b\u0438 Telerik UI \u0432 \u0432\u0430\u0448\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 (\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /Telerik.Web.UI.WebResource.axd \u043f\u043e\u043a\u0430\u0436\u0435\u0442 \u044d\u0442\u043e), \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\ud83d\udcd6 \u0425\u043e\u0442\u0438\u0442\u0435 \u0443\u0437\u043d\u0430\u0442\u044c \u0432\u0441\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0443\u0432\u0438\u0434\u0435\u0442\u044c PoC \u0438 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c RCE-\u0446\u0435\u043f\u043e\u0447\u043a\u0443? \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0438\u0430\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438 \u0438 \u043a\u043e\u0434\u043e\u043c \u0436\u0434\u0435\u0442 \u0432\u0430\u0441 \u0432 PDF-\u0444\u0430\u0439\u043b\u0435!\n\n\ud83d\udd17 \u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435: https://labs.watchtowr.com/more-than-dos-progress-telerik-ui-for-asp-net-ajax-unsafe-reflection-cve-2025-3600/", "url": "https://t.me/critical_bug/1651"}, {"timestamp": "2025-10-23T16:07:47Z", "date_only": false, "value": "2025-10-23T16:07:47.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34509.yaml", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "50a9492a-d600-46a4-9bec-797a07efc78c", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34509.yaml"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "6c4c1df9-b95d-4d5e-9cbe-d1aef44cf2a7"}, {"timestamp": "2025-10-23T22:18:22Z", "date_only": false, "value": "2025-10-23T22:18:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/127", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "16ec009b-8bdb-4d03-b38a-d6d71d83350c", "url": "https://t.me/realcodeb0ss/127"}, {"timestamp": "2025-10-25T21:02:29.063Z", "date_only": false, "value": "2025-10-25T21:02:29.063002Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwiibp2n", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "319fab62-6511-4322-b6dd-967b8a0ff158", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwiibp2n"}, {"timestamp": "2025-11-14T03:30:32Z", "date_only": false, "value": "2025-11-14T03:30:32+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-34509", "field": "timestamps.asserted_at", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-14T03:30:32Z", "date_only": false, "value": "2025-11-14T03:30:32+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34509", "field": "timestamps.first_seen_at", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-30T16:00:50Z", "date_only": false, "value": "2026-01-30T16:00:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/dfadc874106eaccc5a5d155a41499d26", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "6f43db34-47d6-4bf1-ba11-879766a0f29a", "url": "https://gist.github.com/alon710/dfadc874106eaccc5a5d155a41499d26"}, {"timestamp": "2026-01-30T16:10:52Z", "date_only": false, "value": "2026-01-30T16:10:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/5d51fb638647721b63fe1d955723a928", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "34bb2d3a-7e91-4637-8d30-005cfe4e2cea", "url": "https://gist.github.com/alon710/5d51fb638647721b63fe1d955723a928"}, {"timestamp": "2026-01-30T16:10:53Z", "date_only": false, "value": "2026-01-30T16:10:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/dc055af9a98dd7c0502695e0514823d3", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "477c77e9-3f3a-4cbb-9e0e-01a0821b96ef", "url": "https://gist.github.com/alon710/dc055af9a98dd7c0502695e0514823d3"}, {"timestamp": "2026-02-26T17:50:31.319Z", "date_only": false, "value": "2026-02-26T17:50:31.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-34509", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-34509", "field": "timestamps.asserted_at", "uuid": "66439c2e-a319-4852-9b9d-b52d829083cd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-34509", "field": "evidence.0.details.added_date", "uuid": "66439c2e-a319-4852-9b9d-b52d829083cd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "70c6be80-6fa2-4921-add3-4acf7c56d568"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-34509", "field": "timestamps.first_seen_at", "uuid": "66439c2e-a319-4852-9b9d-b52d829083cd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": false, "value": "2026-04-30T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-34509", "field": "status.status_updated_at", "uuid": "66439c2e-a319-4852-9b9d-b52d829083cd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-34509", "field": "timestamps.recorded_at", "uuid": "66439c2e-a319-4852-9b9d-b52d829083cd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:22.275Z", "date_only": false, "value": "2026-06-19T12:42:22.275452Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66439c2e-a319-4852-9b9d-b52d829083cd", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "8e173de6-ee06-4924-afc7-3a75f13c19b1", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66439c2e-a319-4852-9b9d-b52d829083cd"}, {"timestamp": "2026-06-19T12:45:33.931Z", "date_only": false, "value": "2026-06-19T12:45:33.931549Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43389ef1-6d15-40f2-b0f6-9f527264ca5c", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "94cd3cc3-efb9-4b18-b430-fa9379b689a7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43389ef1-6d15-40f2-b0f6-9f527264ca5c"}, {"timestamp": "2026-06-23T14:03:04.192Z", "date_only": false, "value": "2026-06-23T14:03:04.192519Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94618703-7845-423c-b75c-5f089b6230c4", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "70ab24e7-06ad-4287-991e-febac0a2a0f9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94618703-7845-423c-b75c-5f089b6230c4"}, {"timestamp": "2026-06-30T09:23:52.454Z", "date_only": false, "value": "2026-06-30T09:23:52.454090Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7b9adda-549c-44c0-b67d-444ecd1affc4", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "89f4600b-c8e2-4fb0-b2ea-9538510ac838", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a7b9adda-549c-44c0-b67d-444ecd1affc4"}, {"timestamp": "2026-07-01T07:18:22.966Z", "date_only": false, "value": "2026-07-01T07:18:22.966900Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/72c68e32-a7fb-4319-833a-546b553495b8", "record": "CVE-2025-34509", "field": "creation_timestamp", "uuid": "3222cd86-9081-477b-b90c-29a5b9631dce", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/72c68e32-a7fb-4319-833a-546b553495b8"}, {"timestamp": "2026-10-29T21:15:17.384Z", "date_only": false, "value": "2026-10-29T21:15:17.384Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-34509", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T21:15:17.384Z", "date_only": false, "value": "2026-10-29T21:15:17.384Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-34509", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T21:17:05.177Z", "date_only": false, "value": "2026-10-29T21:17:05.177", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34509", "record": "FKIE_CVE-2025-34509", "field": "lastModified"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-34509", "field": "timestamps.last_seen_at", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-34509", "field": "evidence.0.details.observation_date", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-34509", "field": "status.status_updated_at", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-34509", "field": "timestamps.recorded_at", "uuid": "72c68e32-a7fb-4319-833a-546b553495b8", "status": {"status_reason": "confirmed", "exploited": true}}]}