{"uuid": "8b3246df-f4ca-43d8-b409-c4b22e82f836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1185", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4054", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1185\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-02-12T09:31:44Z\n\ud83d\udccf Modified: 2025-02-12T09:31:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1185\n2. https://github.com/janssensjelle/published-pocs/blob/main/pihomehva_sqli_ajax.md\n3. https://vuldb.com/?ctiid.295089\n4. https://vuldb.com/?id.295089\n5. https://vuldb.com/?submit.495548", "creation_timestamp": "2025-02-12T10:10:13.000000Z"}