https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 30 Apr 2026 19:23:00 +0000 https://db.gcve.eu/sighting/507fbad3-71ad-4187-9506-66ab9a6e7970/export {"uuid": "507fbad3-71ad-4187-9506-66ab9a6e7970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3382", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3382\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.\n\ud83d\udccf Published: 2025-04-07T20:00:09.105Z\n\ud83d\udccf Modified: 2025-04-07T20:00:09.105Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303628\n2. https://vuldb.com/?ctiid.303628\n3. https://vuldb.com/?submit.552387\n4. https://github.com/exp3n5ive/Vul/blob/main/xiaozhi-sqli/xiaozhi-sqli.md", "creation_timestamp": "2025-04-07T20:46:21.000000Z"} {"uuid": "507fbad3-71ad-4187-9506-66ab9a6e7970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3382", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3382\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.\n\ud83d\udccf Published: 2025-04-07T20:00:09.105Z\n\ud83d\udccf Modified: 2025-04-07T20:00:09.105Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.303628\n2. https://vuldb.com/?ctiid.303628\n3. https://vuldb.com/?submit.552387\n4. https://github.com/exp3n5ive/Vul/blob/main/xiaozhi-sqli/xiaozhi-sqli.md", "creation_timestamp": "2025-04-07T20:46:21.000000Z"} https://db.gcve.eu/sighting/507fbad3-71ad-4187-9506-66ab9a6e7970/export Mon, 07 Apr 2025 20:46:21 +0000 https://db.gcve.eu/sighting/e52ec14f-2bda-42b3-a6e6-1a2f7dbd22ca/export {"uuid": "e52ec14f-2bda-42b3-a6e6-1a2f7dbd22ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3382", "type": "seen", "source": "https://t.me/cvedetector/22343", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3382 - Joey-Zhou Xiaozhi-ESP32-Server-Java SQL Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-3382 \nPublished : April 7, 2025, 8:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"07 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T22:55:43.000000Z"} {"uuid": "e52ec14f-2bda-42b3-a6e6-1a2f7dbd22ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3382", "type": "seen", "source": "https://t.me/cvedetector/22343", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3382 - Joey-Zhou Xiaozhi-ESP32-Server-Java SQL Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-3382 \nPublished : April 7, 2025, 8:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"07 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-07T22:55:43.000000Z"} https://db.gcve.eu/sighting/e52ec14f-2bda-42b3-a6e6-1a2f7dbd22ca/export Mon, 07 Apr 2025 22:55:43 +0000