{"metadata": {"vulnerability": "cve-2025-2294", "count": 75, "kinds": {"milestone": 4, "sighting": 50, "kev": 11, "other": 10}}, "data": [{"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-2294", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-03-13T18:41:59.900Z", "date_only": false, "value": "2025-03-13T18:41:59.900Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-2294", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-27T16:22:14Z", "date_only": false, "value": "2025-03-27T16:22:14.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-2294", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-03-28T00:00:06Z", "date_only": false, "value": "2025-03-28T00:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IpSkdng-DvuBirFh-8nYsY3OgxKRFd_quSrS72XmwTlTwLs", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "3ef93887-bfba-4733-8a8b-c8b352aca397"}, {"timestamp": "2025-03-28T04:00:06Z", "date_only": false, "value": "2025-03-28T04:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-_T7fiB1UH9VRuMWqeF5wAirAQ9WEH4yGxP0ggrYXPxHLtk", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "d105c968-091a-4e8c-9bb0-5ab00ff2b00a"}, {"timestamp": "2025-03-28T04:22:41.656Z", "date_only": false, "value": "2025-03-28T04:22:41.656Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-2294", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-28T04:29:56Z", "date_only": false, "value": "2025-03-28T04:29:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9264", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "4c9da763-5138-4dfb-acf6-ee6cbf5fbbd6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2294\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\ud83d\udccf Published: 2025-03-28T04:22:41.656Z\n\ud83d\udccf Modified: 2025-03-28T04:22:41.656Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2fb44c6e-520e-4a9f-9987-8b770feb710d?source=cve\n2. https://plugins.trac.wordpress.org/browser/kubio/tags/2.5.1/lib/integrations/third-party-themes/editor-hooks.php#L32", "url": "https://t.me/DarkWebInformer_CVEAlerts/9264"}, {"timestamp": "2025-03-28T05:15:41Z", "date_only": false, "value": "2025-03-28T05:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8FP6-H7XC-PJF2", "record": "GHSA-8FP6-H7XC-PJF2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-28T05:15:41.507Z", "date_only": false, "value": "2025-03-28T05:15:41.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2294", "record": "FKIE_CVE-2025-2294", "field": "published"}, {"timestamp": "2025-03-28T05:40:12.816Z", "date_only": false, "value": "2025-03-28T05:40:12.816468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llg42kwfll2v", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "93278caa-c833-441c-b10f-ec631899328b", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llg42kwfll2v"}, {"timestamp": "2025-03-28T06:00:23Z", "date_only": false, "value": "2025-03-28T06:00:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jQJMvs9XJ8K5QMFoHfbltG_tHt24gUexxQXzcXTKNc5NbgE", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "8e631c15-9f60-4296-9c0b-231836b65b3c"}, {"timestamp": "2025-03-28T06:30:27Z", "date_only": false, "value": "2025-03-28T06:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8FP6-H7XC-PJF2", "record": "GHSA-8FP6-H7XC-PJF2", "field": "published"}, {"timestamp": "2025-03-28T06:30:27Z", "date_only": false, "value": "2025-03-28T06:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8FP6-H7XC-PJF2", "record": "GHSA-8FP6-H7XC-PJF2", "field": "modified"}, {"timestamp": "2025-03-28T07:42:42Z", "date_only": false, "value": "2025-03-28T07:42:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21376", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "247deb38-9501-4280-afb7-5ea0f81f5121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2294 - Kubio AI Page Builder for WordPress Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-2294 \nPublished : March 28, 2025, 5:15 a.m. | 52\u00a0minutes ago \nDescription : The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21376"}, {"timestamp": "2025-03-28T08:57:43.685Z", "date_only": false, "value": "2025-03-28T08:57:43.685386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3llgh3qsdfb2c", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "144c4dfd-06ac-478b-8a95-eac42618290b", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3llgh3qsdfb2c"}, {"timestamp": "2025-03-28T15:36:06.637Z", "date_only": false, "value": "2025-03-28T15:36:06.637037Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-2294", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-28T15:36:06.637Z", "date_only": false, "value": "2025-03-28T15:36:06.637037Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2294", "record": "FKIE_CVE-2025-2294", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-28T15:36:25.747Z", "date_only": false, "value": "2025-03-28T15:36:25.747Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-2294", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-30T07:50:28.264Z", "date_only": false, "value": "2025-03-30T07:50:28.264365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lllebdahn62t", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "9aac6491-7b63-4e52-81f7-b51c73cd714f", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lllebdahn62t"}, {"timestamp": "2025-03-31T16:24:54Z", "date_only": false, "value": "2025-03-31T16:24:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2869", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "a1267349-affc-4f89-ad21-48ca11fd810c", "content": "\u26a1CVE-2025-2294 Targets WordPress Plugin with 90,000+ Active Installs.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2869"}, {"timestamp": "2025-03-31T21:00:08Z", "date_only": false, "value": "2025-03-31T21:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mdXOdpecd3YI3AgX0TS0pDTAKq9R7rqKGN3qwqhQ8UcEmno", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "65f6e6bf-5d0a-4190-b140-406797c6a4ae"}, {"timestamp": "2025-04-03T21:02:13.113Z", "date_only": false, "value": "2025-04-03T21:02:13.113563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llwsemixdv2u", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "3646127f-9e24-45bf-ab58-2c20d636cc45", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llwsemixdv2u"}, {"timestamp": "2025-04-03T22:58:49Z", "date_only": false, "value": "2025-04-03T22:58:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/24", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "2ce970f0-dad7-4e8f-b7e4-bf3985a02d4a", "content": "https://securityonline.info/cve-2025-2294-targets-wordpress-plugin-with-90000-active-installs/", "url": "https://t.me/realcodeb0ss/24"}, {"timestamp": "2025-04-03T23:21:02Z", "date_only": false, "value": "2025-04-03T23:21:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/29531", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "43069869-5cab-4406-8dd6-983d19df27cd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2294 < Wordpress Kubio[Plugin] - Local File Inclusion[LFI].\nURL\uff1ahttps://github.com/realcodeb0ss/CVE-2025-2294-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/29531"}, {"timestamp": "2025-04-04T01:03:18Z", "date_only": false, "value": "2025-04-04T01:03:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/1578", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "731c6232-3c5f-44d6-b0dd-bb1e8595174c", "content": "https://securityonline.info/cve-2025-2294-targets-wordpress-plugin-with-90000-active-installs/", "url": "https://t.me/haj3imad/1578"}, {"timestamp": "2025-04-04T05:00:06Z", "date_only": false, "value": "2025-04-04T05:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/L71BuzMDQtwQeP3qMSXL5bPr0jFw99y21r7TTnYYYvfojuk", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "76d4f360-c2b5-4339-8827-b6cb92867c85"}, {"timestamp": "2025-04-04T08:04:16Z", "date_only": false, "value": "2025-04-04T08:04:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/22", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "a75ce72b-2ad3-4e7c-8677-50d06329ae22", "url": "https://t.me/realcodeb0ss/22"}, {"timestamp": "2025-04-04T13:00:24Z", "date_only": false, "value": "2025-04-04T13:00:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cvexploit/32", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "64893def-3c75-4ae2-9083-2bb721567187", "url": "https://t.me/cvexploit/32"}, {"timestamp": "2025-04-04T13:00:24Z", "date_only": false, "value": "2025-04-04T13:00:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cvexploit/33", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "4d6c5e2b-66f4-4653-b142-48d8409ce300", "content": "https://securityonline.info/cve-2025-2294-targets-wordpress-plugin-with-90000-active-installs/", "url": "https://t.me/cvexploit/33"}, {"timestamp": "2025-04-04T13:00:34Z", "date_only": false, "value": "2025-04-04T13:00:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/29q4YJeI3D1nLJ-8-sEfpXbwMYvQFqXZNAGW8mKXFHaKGo8", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "501f0ffa-6ff3-411a-a586-20e7ca7bd80a"}, {"timestamp": "2025-04-04T13:00:35Z", "date_only": false, "value": "2025-04-04T13:00:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6PnrgR2Pod1_fgzwd7Qbvk4OxPmNOlP8LA4-B8qthyeL2tI", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "1782a024-fef8-43ff-bcd8-f5ee7bf625f7"}, {"timestamp": "2025-04-04T14:50:07.626Z", "date_only": false, "value": "2025-04-04T14:50:07.626774Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-db35b054-b7937bb90e512196", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "ec277739-1ebb-4987-bdd7-b910fde843c6", "url": "https://poliverso.org/objects/0477a01e-db35b054-b7937bb90e512196"}, {"timestamp": "2025-04-04T14:50:07.631Z", "date_only": false, "value": "2025-04-04T14:50:07.631870Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-db35b054-b7937bb90e512196", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "7b799ba3-8109-45b3-a029-e019a53e6682", "url": "https://poliverso.org/objects/0477a01e-db35b054-b7937bb90e512196"}, {"timestamp": "2025-04-04T15:00:27Z", "date_only": false, "value": "2025-04-04T15:00:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/T5fLPVjbQAmUT_F5thE0SYrb6scbFCitau7fM2VIVPECaRaLEMs", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "95c640cb-2d15-4dd8-804d-aae70a534e38"}, {"timestamp": "2025-04-04T15:00:27Z", "date_only": false, "value": "2025-04-04T15:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CW8VnE99Sl7DapnZTFot4QytcX1R_bppC1U-HN6r00k7KKa5HxE", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "f0a66c3a-c138-4956-b121-1ab2b9a66276"}, {"timestamp": "2025-04-05T21:00:06Z", "date_only": false, "value": "2025-04-05T21:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gptxcG5Jvg83wR56zKKTs8fGBMXLE7PNQ-HCnd7IEVmsKx8", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "ce9f2e82-2550-44a2-a1e2-4d487ff2d9b8"}, {"timestamp": "2025-04-15T19:40:28Z", "date_only": false, "value": "2025-04-15T19:40:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/rHz0d/12", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "075ceb20-34c1-45d2-b650-768ec6fe50a6", "content": "PoC CVE-2025-2294 \ud83d\ude3a\n\nhttps://youtu.be/rPU5PipVqwg\n\nEnjoy, first video btw", "url": "https://t.me/rHz0d/12"}, {"timestamp": "2025-04-15T21:44:07Z", "date_only": false, "value": "2025-04-15T21:44:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HZiUINgNQ2pS0R_w-XaSSj9Acn20hZO1_YKhU5CHrEZdOR8", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "a6c3db2c-2ba4-49d3-a2e9-94db7e824f24"}, {"timestamp": "2025-04-16T00:30:10.724Z", "date_only": false, "value": "2025-04-16T00:30:10.724711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lmvdlngedx2p", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "15681eca-97ab-4675-a4b9-7fa918c0edec", "url": "https://bsky.app/profile/bolhasec.com/post/3lmvdlngedx2p"}, {"timestamp": "2025-04-16T13:00:08Z", "date_only": false, "value": "2025-04-16T13:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Tz2s4dWBDCMxptFMqjH1pfsiKt1Jb6F0OQY1E-Dj9Kb60Ks", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "034f6b7e-6593-4e94-b612-2e02be53352f"}, {"timestamp": "2025-04-20T21:02:10.958Z", "date_only": false, "value": "2025-04-20T21:02:10.958588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnbkcd5bjr2u", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "13f871e4-edae-4729-80f2-7d5a9455f8e1", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnbkcd5bjr2u"}, {"timestamp": "2025-04-27T01:00:06Z", "date_only": false, "value": "2025-04-27T01:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TRVkTuyDxAehF6jM_1cr9XM-2CzqHAKy6-59Uq1bGVQsxDs", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "16acd78d-d220-4e93-a65d-481a4a834ce0"}, {"timestamp": "2025-05-21T15:02:40Z", "date_only": false, "value": "2025-05-21T15:02:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/rHz0d/11", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "c0afefcf-3317-4429-8e93-861a179fb50b", "content": "\ud83d\udea8 Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion\n\n\ud83d\udcdd The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via the kubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included.\n\nhttps://github.com/rhz0d/CVE-2025-2294", "url": "https://t.me/rHz0d/11"}, {"timestamp": "2025-06-06T20:39:53Z", "date_only": false, "value": "2025-06-06T20:39:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-2294", "field": "timestamps.asserted_at", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-06T20:39:53Z", "date_only": false, "value": "2025-06-06T20:39:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-2294", "field": "timestamps.first_seen_at", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-2294", "field": "timestamps.asserted_at", "uuid": "cea1a388-388b-4e43-9eee-789f3cd5def0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-2294", "field": "evidence.0.details.added_date", "uuid": "cea1a388-388b-4e43-9eee-789f3cd5def0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "e9a2b1ef-1721-4916-8541-c1350bdefa6f"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-2294", "field": "timestamps.first_seen_at", "uuid": "cea1a388-388b-4e43-9eee-789f3cd5def0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-2294", "field": "status.status_updated_at", "uuid": "cea1a388-388b-4e43-9eee-789f3cd5def0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-28T19:00:09Z", "date_only": false, "value": "2025-07-28T19:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/75Mb5uYpQosCyupAbaPXt3tVtlvlDXKkJ2DuCinTsyRQAIk", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "8ae9816e-f161-4295-8fb4-1e29f6d30309"}, {"timestamp": "2025-08-10T18:27:44Z", "date_only": false, "value": "2025-08-10T18:27:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "56f8091a-cd28-4ae0-9a19-a7d68653eb49"}, {"timestamp": "2025-09-10T07:47:57Z", "date_only": false, "value": "2025-09-10T07:47:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "062ae713-b2d8-4ce0-ba11-93f5051f5d83"}, {"timestamp": "2025-11-11T00:00:00Z", "date_only": false, "value": "2025-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "d111e352-caf6-4a2e-a211-0d471b513c70"}, {"timestamp": "2026-01-27T20:16:06.731Z", "date_only": false, "value": "2026-01-27T20:16:06.731370Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115968898862082584", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "e7845ba6-1699-4000-80df-30f5a37fda31", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115968898862082584"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "64980190-22ec-45d3-9cd3-b31def2ad270"}, {"timestamp": "2026-04-08T16:44:42.384Z", "date_only": false, "value": "2026-04-08T16:44:42.384Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-2294", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:44:42.384Z", "date_only": false, "value": "2026-04-08T16:44:42.384Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2025-2294", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "01b63a76-a257-4474-84c2-b990198f8f18"}, {"timestamp": "2026-06-17T09:06:42.353Z", "date_only": false, "value": "2026-06-17T09:06:42.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2294", "record": "FKIE_CVE-2025-2294", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:08.296Z", "date_only": false, "value": "2026-06-19T12:46:08.296354Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2892193-f1e0-42ee-a3d2-8a2cec762bc5", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "4e451532-f497-4d57-9b61-3b7db7fc868d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2892193-f1e0-42ee-a3d2-8a2cec762bc5"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-2294", "field": "timestamps.recorded_at", "uuid": "cea1a388-388b-4e43-9eee-789f3cd5def0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:12.348Z", "date_only": false, "value": "2026-06-23T11:12:12.348203Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cea1a388-388b-4e43-9eee-789f3cd5def0", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "8f1af5fa-1ecc-4bfb-a583-c5bd6d052918", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/cea1a388-388b-4e43-9eee-789f3cd5def0"}, {"timestamp": "2026-06-23T14:03:28.343Z", "date_only": false, "value": "2026-06-23T14:03:28.343967Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/77faf571-0ae6-4340-bfc2-266ae1e6dd86", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "0ebf9c37-222f-4602-961d-8fcfd54e29fa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/77faf571-0ae6-4340-bfc2-266ae1e6dd86"}, {"timestamp": "2026-06-30T09:23:09.249Z", "date_only": false, "value": "2026-06-30T09:23:09.249841Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d085b76-fffc-4f6e-8304-988940047495", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "637b7915-bb1d-4bd8-824b-4f23140c52a3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3d085b76-fffc-4f6e-8304-988940047495"}, {"timestamp": "2026-07-01T05:54:47.356Z", "date_only": false, "value": "2026-07-01T05:54:47.356742Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "ef88fb8a-990f-476b-b62c-8b60819b4892", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/0157d64c-2af8-4311-b1ad-6cf3c1ed39f1"}, {"timestamp": "2026-07-09T03:00:08.872Z", "date_only": false, "value": "2026-07-09T03:00:08.872445Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1700", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "61d2e240-61b0-4da5-8bf1-b6ed20a52d52", "url": "https://t.me/brutsecurity/1700"}, {"timestamp": "2026-07-10T00:00:32.429Z", "date_only": false, "value": "2026-07-10T00:00:32.429146Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1700", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "318b8ea6-8a91-4649-b6e0-36ab0cb36b5a", "url": "https://t.me/brutsecurity/1700"}, {"timestamp": "2026-07-11T13:00:04.943Z", "date_only": false, "value": "2026-07-11T13:00:04.943912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1700", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "96ac0285-1a8a-41a3-9ea4-10c394a557af", "url": "https://t.me/brutsecurity/1700"}, {"timestamp": "2026-07-12T00:00:48.447Z", "date_only": false, "value": "2026-07-12T00:00:48.447729Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1700", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "0b00cee9-1d6a-4bcf-ae7a-42adac81f731", "url": "https://t.me/brutsecurity/1700"}, {"timestamp": "2026-08-14T16:00:20.822Z", "date_only": false, "value": "2026-08-14T16:00:20.822242Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/441", "record": "CVE-2025-2294", "field": "creation_timestamp", "uuid": "815e7893-430f-4f14-a914-07d782b66071", "url": "https://t.me/purp_sec/441"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-2294", "field": "timestamps.last_seen_at", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-2294", "field": "evidence.0.details.observation_date", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-2294", "field": "status.status_updated_at", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-2294", "field": "timestamps.recorded_at", "uuid": "0157d64c-2af8-4311-b1ad-6cf3c1ed39f1", "status": {"status_reason": "confirmed", "exploited": true}}]}