{"metadata": {"vulnerability": "CVE-2025-6388", "count": 18, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 10}}, "data": [{"timestamp": "2025-06-20T00:46:48.403Z", "date_only": false, "value": "2025-06-20T00:46:48.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-6388", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-25T15:52:07Z", "date_only": false, "value": "2025-06-25T15:52:07.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-6388", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-10-02T19:26:25Z", "date_only": false, "value": "2025-10-02T19:26:25.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-6388", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-10-03T08:23:49.620Z", "date_only": false, "value": "2025-10-03T08:23:49.620Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-6388", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-10-03T09:03:34.458Z", "date_only": false, "value": "2025-10-03T09:03:34.458883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m2bpk4tsdx26", "record": "cve-2025-6388", "field": "creation_timestamp", "uuid": "a398dd35-ebb9-4c4f-9e45-5e0949e7b34d", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m2bpk4tsdx26"}, {"timestamp": "2025-10-03T09:15:38Z", "date_only": false, "value": "2025-10-03T09:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7Q8C-77JC-9828", "record": "GHSA-7Q8C-77JC-9828", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-10-03T09:15:38.300Z", "date_only": false, "value": "2025-10-03T09:15:38.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6388", "record": "FKIE_CVE-2025-6388", "field": "published"}, {"timestamp": "2025-10-03T09:30:19Z", "date_only": false, "value": "2025-10-03T09:30:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7Q8C-77JC-9828", "record": "GHSA-7Q8C-77JC-9828", "field": "published"}, {"timestamp": "2025-10-03T09:30:19Z", "date_only": false, "value": "2025-10-03T09:30:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7Q8C-77JC-9828", "record": "GHSA-7Q8C-77JC-9828", "field": "modified"}, {"timestamp": "2025-10-03T15:56:11.354Z", "date_only": false, "value": "2025-10-03T15:56:11.354671Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-6388", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-03T15:56:11.354Z", "date_only": false, "value": "2025-10-03T15:56:11.354671Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6388", "record": "FKIE_CVE-2025-6388", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-03T15:56:24.432Z", "date_only": false, "value": "2025-10-03T15:56:24.432Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-6388", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-04T21:02:26.333Z", "date_only": false, "value": "2025-10-04T21:02:26.333794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2fi6hs6eb23", "record": "CVE-2025-6388", "field": "creation_timestamp", "uuid": "e7406c0d-b03d-493e-bfb2-3691d8f2df23", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2fi6hs6eb23"}, {"timestamp": "2025-10-07T08:14:58Z", "date_only": false, "value": "2025-10-07T08:14:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1167", "record": "CVE-2025-6388", "field": "creation_timestamp", "uuid": "5a9652fa-c0f4-4361-b09a-9b49db25c863", "content": "Top exploited vulns of the Week\n\nThis week\u2019s Vulnerability Trend shows a mix of big-platform remote RCEs (Oracle EBS, DrayTek), high-impact web plugin and local network exploits (WordPress Spirit, SillyTavern), plus client/runtime abuse in widely distributed software (Unity, Zabbix agent). Notable: an enterprise-scale, pre-auth Oracle RCE is already weaponized by ransomware groups (Cl0p / GRACEFUL SPIDER) and added to CISA KEV \u2014 treat it as highest priority.\n\nQuick hit list:\n\n\u2b50\ufe0f CVE-2025-61882 \u2014 Oracle E-Business Suite (BI Publisher integration) \u2014 CVSS 9.8, pre-auth RCE, actively used by Cl0p & GRACEFUL SPIDER; on CISA KEV. Patch immediately or isolate EBS HTTP endpoints.\n\u2b50\ufe0f CVE-2025-6388 \u2014 Spirit Framework (WordPress) \u2014 CVSS 9.8, unauthenticated admin takeover. Update to 1.2.15 or remove the plugin.\n\u2b50\ufe0f CVE-2025-59159 \u2014 SillyTavern (DNS rebinding) \u2014 CVSS ~9.6, local network\u2192API key theft. Upgrade to 1.13.4 + enable host whitelist.\n\u2b50\ufe0f CVE-2025-10547 \u2014 DrayTek Vigor routers \u2014 CVSS 8.8, unauth RCE in HTTP CGI; remote root possible. Apply vendor fixes and audit external-facing routers.\n\u2b50\ufe0f CVE-2025-59489 \u2014 Unity Runtime \u2014 Arg injection / DLL hijack in apps; PoCs available; exploited via trojanized games. Treat as supply-chain / app-store risk for distributed clients.\n\u2b50\ufe0f CVE-2025-27237 \u2014 Zabbix Agent (Windows LPE) \u2014 DLL injection via writable OpenSSL path; observed in targeted ops. Harden file perms and monitor for local privilege escalations.", "url": "https://t.me/bhhub/1167"}, {"timestamp": "2026-04-08T17:13:09.342Z", "date_only": false, "value": "2026-04-08T17:13:09.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-6388", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:13:09.342Z", "date_only": false, "value": "2026-04-08T17:13:09.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-6388", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-29T04:14:15.277Z", "date_only": false, "value": "2026-04-29T04:14:15.277523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkmaeeb6fz2q", "record": "CVE-2025-6388", "field": "creation_timestamp", "uuid": "2991c9cf-bb52-4f79-a5ef-2e8d5568da4a", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkmaeeb6fz2q"}, {"timestamp": "2026-10-12T15:10:00.207Z", "date_only": false, "value": "2026-10-12T15:10:00.207", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-6388", "record": "FKIE_CVE-2025-6388", "field": "lastModified"}]}