{"metadata": {"vulnerability": "cve-2025-24801", "count": 44, "kinds": {"milestone": 6, "sighting": 29, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-01-23T17:11:35.838Z", "date_only": false, "value": "2025-01-23T17:11:35.838Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-24801", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-12T10:58:14.248Z", "date_only": false, "value": "2025-03-12T10:58:14.248324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "68b769a5-8d92-49f7-94e1-563a1e0ae5bd", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j"}, {"timestamp": "2025-03-12T11:30:36.209Z", "date_only": false, "value": "2025-03-12T11:30:36.209339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "8606e8bc-f787-4f86-8b38-4c0ee736357b", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c"}, {"timestamp": "2025-03-12T12:09:32.796Z", "date_only": false, "value": "2025-03-12T12:09:32.796763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lk6kdzgvaa2a", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "e4de77ba-4ee1-4bc5-964e-b13c69b002c2", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3lk6kdzgvaa2a"}, {"timestamp": "2025-03-12T13:15:11.893Z", "date_only": false, "value": "2025-03-12T13:15:11.893836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk6nzfq5z227", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "3eb13eec-5d7d-49c2-9282-4ef6c248aa32", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lk6nzfq5z227"}, {"timestamp": "2025-03-12T14:25:22Z", "date_only": false, "value": "2025-03-12T14:25:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2597", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "9662ebd2-c2cc-4e27-8b84-b5136d610606", "content": "\u26a1Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2597"}, {"timestamp": "2025-03-13T09:30:43Z", "date_only": false, "value": "2025-03-13T09:30:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/432", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "6be37d25-f7c4-4c25-8c4c-8b05d4644269", "content": "Top Security News for Today\n\nImpossible XXE in PHP  \nhttps://www.reddit.com/r/netsec/comments/1j9f0i7/impossible_xxe_in_php/\n\nAnalysis of CVE-2025-24813 Apache Tomcat Path Equivalence RCE  \nhttps://www.reddit.com/r/netsec/comments/1j9f0ur/analysis_of_cve202524813_apache_tomcat_path/\n\nCybersecurity Can\u2019t Wait: Modern Enterprises Must Adapt  \nhttps://www.tripwire.com/state-of-security/cybersecurity-cant-wait-modern-enterprises-must-adapt\n\nPre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)  \nhttps://www.reddit.com/r/netsec/comments/1j9hcdw/preauthentication_sql_injection_to_rce_in_glpi/\n\nChina, Russia, Iran, and North Korea Intelligence Sharing  \nhttps://www.schneier.com/blog/archives/2025/03/china-russia-iran-and-north-korea-intelligence-sharing.html\n\nBehind the Scenes of Burp AI: How we built it, and what's next  \nhttps://portswigger.net/blog/behind-the-scenes-of-burp-ai-how-we-built-it-and-whats-next\n\nNew Lumma Stealer campaign abuses Reddit threads to drop malware via fake WeTransfer links  \nhttps://www.reddit.com/r/netsec/comments/1j9xq07/new_lumma_stealer_campaign_abuses_reddit_threads/\n\nRuthless Mantis - Modus Operandi  \nhttps://www.reddit.com/r/netsec/comments/1j9v0dh/ruthless_mantis_modus_operandi/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/432"}, {"timestamp": "2025-03-13T09:40:21.398Z", "date_only": false, "value": "2025-03-13T09:40:21.398312Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/2002296b-dd57-45e0-b127-feeaa53cc204", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "8b5ba3aa-428e-498c-9698-92dd4b132e62", "url": "https://vulnerability.circl.lu/bundle/2002296b-dd57-45e0-b127-feeaa53cc204"}, {"timestamp": "2025-03-13T10:57:43.431Z", "date_only": false, "value": "2025-03-13T10:57:43.431265Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/114154763751292664", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "bd73f853-a9b4-49f3-973e-973f4738e668", "url": "https://infosec.exchange/users/decio/statuses/114154763751292664"}, {"timestamp": "2025-03-13T17:55:31Z", "date_only": false, "value": "2025-03-13T17:55:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9727", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "9274d966-7b4e-4029-b1c9-20c83ef3804f", "content": "Pre-authentication SQL injection to RCE in GLPI (CVE-2025-24799/CVE-2025-24801)\n\nhttps://blog.lexfo.fr/glpi-sql-to-rce.html", "url": "https://t.me/thebugbountyhunter/9727"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": true, "value": "2025-03-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0219", "record": "CERTFR-2025-AVI-0219", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-18T07:01:04.699Z", "date_only": false, "value": "2025-03-18T07:01:04.699138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3lkn3vvzuf32u", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "045accb5-26e6-4713-8971-60c01beb16b7", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3lkn3vvzuf32u"}, {"timestamp": "2025-03-18T08:37:42.716Z", "date_only": false, "value": "2025-03-18T08:37:42.716011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3lknbcpxkch2n", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "656d140c-2d66-47cb-a7b8-632620d45c27", "url": "https://bsky.app/profile/bearstech.com/post/3lknbcpxkch2n"}, {"timestamp": "2025-03-18T18:32:06.401Z", "date_only": false, "value": "2025-03-18T18:32:06.401Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24801", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-18T18:32:06.401Z", "date_only": false, "value": "2025-03-18T18:32:06.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-24801", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-18T18:49:07.697Z", "date_only": false, "value": "2025-03-18T18:49:07.697777Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24801", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-18T18:49:07.697Z", "date_only": false, "value": "2025-03-18T18:49:07.697777Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24801", "record": "FKIE_CVE-2025-24801", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-18T18:51:51.204Z", "date_only": false, "value": "2025-03-18T18:51:51.204Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-24801", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-18T18:51:51.204Z", "date_only": false, "value": "2025-03-18T18:51:51.204Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24801", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-18T19:03:05Z", "date_only": false, "value": "2025-03-18T19:03:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7968", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "5dc4f149-b89d-4e51-844a-83e7ece9681a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24801\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.\n\ud83d\udccf Published: 2025-03-18T18:32:06.401Z\n\ud83d\udccf Modified: 2025-03-18T18:32:06.401Z\n\ud83d\udd17 References:\n1. https://github.com/glpi-project/glpi/security/advisories/GHSA-g2p3-33ff-r555", "url": "https://t.me/DarkWebInformer_CVEAlerts/7968"}, {"timestamp": "2025-03-18T19:15:00Z", "date_only": false, "value": "2025-03-18T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-24801", "record": "UBUNTU-CVE-2025-24801", "field": "published"}, {"timestamp": "2025-03-18T19:15:49.110Z", "date_only": false, "value": "2025-03-18T19:15:49.110", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24801", "record": "FKIE_CVE-2025-24801", "field": "published"}, {"timestamp": "2025-03-18T19:42:57.057Z", "date_only": false, "value": "2025-03-18T19:42:57.057564Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114185140719428080", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "3a0b1780-95a2-41c3-ac3d-f690f5d39654", "url": "https://infosec.exchange/users/cR0w/statuses/114185140719428080"}, {"timestamp": "2025-03-18T19:48:36.705Z", "date_only": false, "value": "2025-03-18T19:48:36.705593Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114185162962943617", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "35a2bece-104b-42de-a674-24ed7779111a", "url": "https://mastodon.social/users/CyberSignaler/statuses/114185162962943617"}, {"timestamp": "2025-03-18T20:18:42.938Z", "date_only": false, "value": "2025-03-18T20:18:42.938058Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoii25z2w2k", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "e374b5cb-4bd4-4685-ad04-0a501349d03c", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoii25z2w2k"}, {"timestamp": "2025-03-18T21:55:37Z", "date_only": false, "value": "2025-03-18T21:55:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20604", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "fbdb079d-3669-483e-8f91-b87f19659655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24801 - \"GLPI PHP File Upload Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-24801 \nPublished : March 18, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20604"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0219", "record": "CERTFR-2025-AVI-0219", "field": "last_revision_date"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0219", "record": "CERTFR-2025-AVI-0219", "field": "initial_release_date"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0219", "record": "CERTFR-2025-AVI-0219", "field": "revisions.0.revision_date"}, {"timestamp": "2025-03-20T16:28:14.440Z", "date_only": false, "value": "2025-03-20T16:28:14.440343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lkt4jwpsi22b", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "d0118b81-9f86-4bc8-8cc9-317d988d6c17", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lkt4jwpsi22b"}, {"timestamp": "2025-03-26T00:36:58Z", "date_only": false, "value": "2025-03-26T00:36:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11966", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "61fedd65-bbb7-421a-9bbd-a04818fc1e2f", "content": "#exploit\n1. CVE-2025-1974, CVE-2025-24514:\nIngress(Nightmare) NGINX RCE\nhttps://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities\n\n2. CVE-2025-24799, CVE-2025-24801:\nPre-auth SQLi to RCE in GLPI\nhttps://blog.lexfo.fr/glpi-sql-to-rce.html\n\n3. CVE-2025-29927:\nAuthorization Bypass in Next.js Middleware\nhttps://github.com/arvion-agent/next-CVE-2025-29927\n]-> Bypass Checker:\nhttps://github.com/RoyCampos/CVE-2025-29927", "url": "https://t.me/CyberSecurityTechnologies/11966"}, {"timestamp": "2025-04-19T13:00:06Z", "date_only": false, "value": "2025-04-19T13:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oYmpRnsP0n5l9UoNVnmi0Tqagk8hdqptE5SM8rliaeN2ddE", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "d1046a14-ce96-461f-93ae-4f48ded945df"}, {"timestamp": "2025-05-06T09:00:07Z", "date_only": false, "value": "2025-05-06T09:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aFwfStP8wFlVkLpHBloIlhn7vOW90LKUAH04hsmOYUZn0T4", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "cae2ca9f-d206-424c-8de4-d3d52a53c62d"}, {"timestamp": "2025-05-07T18:19:52Z", "date_only": false, "value": "2025-05-07T18:19:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/35931", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "debbc8cf-04cf-4e6c-adb4-451dfabb5d61", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-24801 Exploit \nURL\uff1ahttps://github.com/fatkz/CVE-2025-24801\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/35931"}, {"timestamp": "2025-10-24T05:18:09Z", "date_only": false, "value": "2025-10-24T05:18:09Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-24801", "record": "UBUNTU-CVE-2025-24801", "field": "modified"}, {"timestamp": "2026-06-17T08:59:38.173Z", "date_only": false, "value": "2026-06-17T08:59:38.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24801", "record": "FKIE_CVE-2025-24801", "field": "lastModified"}, {"timestamp": "2026-07-12T22:00:07.455Z", "date_only": false, "value": "2026-07-12T22:00:07.455208Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1135", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "f80e9f3b-6b6f-41d3-8366-ef84cebf15a5", "url": "https://t.me/securixy_kz/1135"}, {"timestamp": "2026-07-13T00:00:18.429Z", "date_only": false, "value": "2026-07-13T00:00:18.429057Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/1135", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "01a86faf-92f0-4f4b-a95d-f063727f9d13", "url": "https://t.me/securixy_kz/1135"}, {"timestamp": "2026-07-14T00:01:02.060Z", "date_only": false, "value": "2026-07-14T00:01:02.060211Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/1135", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "88710dc9-81cc-4898-8652-de23062c01b8", "url": "https://t.me/securixy_kz/1135"}, {"timestamp": "2026-07-29T12:02:04.291Z", "date_only": false, "value": "2026-07-29T12:02:04.291791Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5081", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "6da0d0c3-a4d7-424c-909c-931fd80c211f", "url": "https://t.me/reverseame/5081"}, {"timestamp": "2026-07-30T00:02:15.370Z", "date_only": false, "value": "2026-07-30T00:02:15.370565Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5081", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "d10df421-4c19-495b-aa21-3963fd199214", "url": "https://t.me/reverseame/5081"}, {"timestamp": "2026-08-02T02:00:03.648Z", "date_only": false, "value": "2026-08-02T02:00:03.648118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5081", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "44a92fe7-fc1b-42fe-bcc1-07113cb9cff9", "url": "https://t.me/reverseame/5081"}, {"timestamp": "2026-08-03T02:14:01.531Z", "date_only": false, "value": "2026-08-03T02:14:01.531166Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5081", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "dfb34cf3-c1bf-465d-b7e1-268ea4cef82a", "url": "https://t.me/reverseame/5081"}, {"timestamp": "2026-10-02T13:06:47Z", "date_only": false, "value": "2026-10-02T13:06:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104070", "record": "CVE-2025-24801", "field": "creation_timestamp", "uuid": "08e8a719-4e2d-48cf-bb71-e277f85e4453", "url": "https://t.me/GithubRedTeam/104070"}]}