https://db.gcve.eu/sightings/feed 2026-05-27T23:44:15.326424+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/cbcf26ad-24d2-4b9f-8eb3-463988cde5a8/export 2026-05-27T23:44:15.686356+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "cbcf26ad-24d2-4b9f-8eb3-463988cde5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884286733931596", "content": "", "creation_timestamp": "2025-01-24T16:31:49.442687Z"} 2025-01-24T16:31:49.442687+00:00 https://db.gcve.eu/sighting/523f037e-960f-49cb-ad8d-01a91443bdd5/export 2026-05-27T23:44:15.686295+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "523f037e-960f-49cb-ad8d-01a91443bdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113884389353887186", "content": "", "creation_timestamp": "2025-01-24T16:57:55.303847Z"} 2025-01-24T16:57:55.303847+00:00 https://db.gcve.eu/sighting/a0c45f66-e4a8-40a7-be1b-758f7eef4f50/export 2026-05-27T23:44:15.686205+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "a0c45f66-e4a8-40a7-be1b-758f7eef4f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22609\n\ud83d\udd39 Description: Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach any existing private key on a coolify instance to his own server. If the server configuration of IP / domain, port (most likely 22) and user (root) matches with the victim's server configuration, then the attacker can use the `Terminal` feature and execute arbitrary commands on the victim's server. Version 4.0.0-beta.361 fixes the issue.\n\ud83d\udccf Published: 2025-01-24T16:30:34.465Z\n\ud83d\udccf Modified: 2025-01-24T16:33:08.221Z\n\ud83d\udd17 References:\n1. https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-01-24T17:05:11.000000Z"} 2025-01-24T17:05:11+00:00 https://db.gcve.eu/sighting/fafe0bc0-f21f-4282-91bf-905969a6a141/export 2026-05-27T23:44:15.684444+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "fafe0bc0-f21f-4282-91bf-905969a6a141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "seen", "source": "https://t.me/suboxone_chatroom/7370", "content": "CVE-2025-22609, -22611, -22612: Multiple vulnerabilities in Coolify, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nThree vulnerabilities of highest severity in Coolify allow for RCE, privilege escalation, and authentication bypass.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/vUWWf\n\ud83d\udc49 Dork: http.favicon.hash_sha256:eaf648b6000a49599ed58bda49e576d0f981e535a8075d524a4be890edcf96d0 AND uri:*login*\n\nVendor's advisory: https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-04-01T12:36:06.000000Z"} 2025-04-01T12:36:06+00:00