https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 20 May 2026 05:13:13 +0000 https://db.gcve.eu/sighting/3a37a39d-9f1b-4bea-b84c-4c9622d095ee/export {"uuid": "3a37a39d-9f1b-4bea-b84c-4c9622d095ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "Telegram/lrnbbKr_0Y9PWqcieFlzhRyww5p9ZNViWHePCMve8vlMCxc", "content": "", "creation_timestamp": "2025-05-02T00:01:05.000000Z"} {"uuid": "3a37a39d-9f1b-4bea-b84c-4c9622d095ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "Telegram/lrnbbKr_0Y9PWqcieFlzhRyww5p9ZNViWHePCMve8vlMCxc", "content": "", "creation_timestamp": "2025-05-02T00:01:05.000000Z"} https://db.gcve.eu/sighting/3a37a39d-9f1b-4bea-b84c-4c9622d095ee/export Fri, 02 May 2025 00:01:05 +0000 https://db.gcve.eu/sighting/970c5169-2158-4546-a5dc-c81d9b556aa1/export {"uuid": "970c5169-2158-4546-a5dc-c81d9b556aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5afgc42p", "content": "", "creation_timestamp": "2025-05-02T02:01:14.480214Z"} {"uuid": "970c5169-2158-4546-a5dc-c81d9b556aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5afgc42p", "content": "", "creation_timestamp": "2025-05-02T02:01:14.480214Z"} https://db.gcve.eu/sighting/970c5169-2158-4546-a5dc-c81d9b556aa1/export Fri, 02 May 2025 02:01:14 +0000 https://db.gcve.eu/sighting/ea5e4bb3-e1a5-4227-bb20-1cf7ebcf03a3/export {"uuid": "ea5e4bb3-e1a5-4227-bb20-1cf7ebcf03a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "https://t.me/cvedetector/24297", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-43595 - MSP360 Backup Privilege Escalation Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-43595 \nPublished : May 1, 2025, 10:15 p.m. | 2\u00a0hours, 27\u00a0minutes ago \nDescription : An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. Users are recommended to upgrade to MSP360 Backup 4.4 (released on 2025-04-22). \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T03:23:45.000000Z"} {"uuid": "ea5e4bb3-e1a5-4227-bb20-1cf7ebcf03a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43595", "type": "seen", "source": "https://t.me/cvedetector/24297", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-43595 - MSP360 Backup Privilege Escalation Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-43595 \nPublished : May 1, 2025, 10:15 p.m. | 2\u00a0hours, 27\u00a0minutes ago \nDescription : An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. Users are recommended to upgrade to MSP360 Backup 4.4 (released on 2025-04-22). \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T03:23:45.000000Z"} https://db.gcve.eu/sighting/ea5e4bb3-e1a5-4227-bb20-1cf7ebcf03a3/export Fri, 02 May 2025 03:23:45 +0000 https://db.gcve.eu/sighting/72cb209e-65d8-4743-ba8a-b3a7d76d582e/export {"uuid": "72cb209e-65d8-4743-ba8a-b3a7d76d582e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4359\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-06T14:00:07.190Z\n\ud83d\udccf Modified: 2025-05-06T14:00:07.190Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.307477\n2. https://vuldb.com/?ctiid.307477\n3. https://vuldb.com/?submit.564746\n4. https://github.com/arpcyber010/CVE/issues/1\n5. https://itsourcecode.com/", "creation_timestamp": "2025-05-06T14:21:33.000000Z"} {"uuid": "72cb209e-65d8-4743-ba8a-b3a7d76d582e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15124", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4359\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-06T14:00:07.190Z\n\ud83d\udccf Modified: 2025-05-06T14:00:07.190Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.307477\n2. https://vuldb.com/?ctiid.307477\n3. https://vuldb.com/?submit.564746\n4. https://github.com/arpcyber010/CVE/issues/1\n5. https://itsourcecode.com/", "creation_timestamp": "2025-05-06T14:21:33.000000Z"} https://db.gcve.eu/sighting/72cb209e-65d8-4743-ba8a-b3a7d76d582e/export Tue, 06 May 2025 14:21:33 +0000 https://db.gcve.eu/sighting/fd05d1c2-6036-42a0-83da-05209c3b8c1d/export {"uuid": "fd05d1c2-6036-42a0-83da-05209c3b8c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "published-proof-of-concept", "source": "Telegram/v4oxpfo9WMwho6oVFHxSNkbuEpcKYYoL6DEjmxP4vSCwZHA", "content": "", "creation_timestamp": "2025-05-06T16:30:21.000000Z"} {"uuid": "fd05d1c2-6036-42a0-83da-05209c3b8c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "published-proof-of-concept", "source": "Telegram/v4oxpfo9WMwho6oVFHxSNkbuEpcKYYoL6DEjmxP4vSCwZHA", "content": "", "creation_timestamp": "2025-05-06T16:30:21.000000Z"} https://db.gcve.eu/sighting/fd05d1c2-6036-42a0-83da-05209c3b8c1d/export Tue, 06 May 2025 16:30:21 +0000 https://db.gcve.eu/sighting/264e553f-a108-4444-a194-c6c5f70d8a02/export {"uuid": "264e553f-a108-4444-a194-c6c5f70d8a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "exploited", "source": "https://t.me/cvedetector/24619", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-4359 - iSourcecode Gym Management System SQL Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-4359 \nPublished : May 6, 2025, 2:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T18:39:58.000000Z"} {"uuid": "264e553f-a108-4444-a194-c6c5f70d8a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4359", "type": "exploited", "source": "https://t.me/cvedetector/24619", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-4359 - iSourcecode Gym Management System SQL Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-4359 \nPublished : May 6, 2025, 2:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"06 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-06T18:39:58.000000Z"} https://db.gcve.eu/sighting/264e553f-a108-4444-a194-c6c5f70d8a02/export Tue, 06 May 2025 18:39:58 +0000 https://db.gcve.eu/sighting/aca9c884-8aa1-4fa1-bbc4-06852fe989e4/export {"uuid": "aca9c884-8aa1-4fa1-bbc4-06852fe989e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43596", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114552727549763989", "content": "", "creation_timestamp": "2025-05-22T17:45:06.669210Z"} {"uuid": "aca9c884-8aa1-4fa1-bbc4-06852fe989e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43596", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114552727549763989", "content": "", "creation_timestamp": "2025-05-22T17:45:06.669210Z"} https://db.gcve.eu/sighting/aca9c884-8aa1-4fa1-bbc4-06852fe989e4/export Thu, 22 May 2025 17:45:06 +0000 https://db.gcve.eu/sighting/16ab008d-e050-4178-92c3-b4de69b1ffbd/export {"uuid": "16ab008d-e050-4178-92c3-b4de69b1ffbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43596", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43596\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (released on 2025-05-15).\n\ud83d\udccf Published: 2025-05-22T16:49:06.833Z\n\ud83d\udccf Modified: 2025-05-22T19:33:20.668Z\n\ud83d\udd17 References:\n1. https://help.msp360.com/cloudberry-backup/whats-new\n2. https://help.msp360.com/cloudberry-backup/security/admin-privileges\n3. https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-119-01.json\n4. https://www.cve.org/CVERecord?id=CVE-2025-43596", "creation_timestamp": "2025-05-22T19:45:49.000000Z"} {"uuid": "16ab008d-e050-4178-92c3-b4de69b1ffbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43596", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43596\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Upgrade to MSP360 Backup 8.1.1.19 (released on 2025-05-15).\n\ud83d\udccf Published: 2025-05-22T16:49:06.833Z\n\ud83d\udccf Modified: 2025-05-22T19:33:20.668Z\n\ud83d\udd17 References:\n1. https://help.msp360.com/cloudberry-backup/whats-new\n2. https://help.msp360.com/cloudberry-backup/security/admin-privileges\n3. https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-119-01.json\n4. https://www.cve.org/CVERecord?id=CVE-2025-43596", "creation_timestamp": "2025-05-22T19:45:49.000000Z"} https://db.gcve.eu/sighting/16ab008d-e050-4178-92c3-b4de69b1ffbd/export Thu, 22 May 2025 19:45:49 +0000 https://db.gcve.eu/sighting/12961310-b58f-407d-ae08-c1b9ddbc3762/export {"uuid": "12961310-b58f-407d-ae08-c1b9ddbc3762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43593", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43593\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-06-10T16:23:00.230Z\n\ud83d\udccf Modified: 2025-06-10T16:23:00.230Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-53.html", "creation_timestamp": "2025-06-10T16:31:46.000000Z"} {"uuid": "12961310-b58f-407d-ae08-c1b9ddbc3762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43593", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43593\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-06-10T16:23:00.230Z\n\ud83d\udccf Modified: 2025-06-10T16:23:00.230Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-53.html", "creation_timestamp": "2025-06-10T16:31:46.000000Z"} https://db.gcve.eu/sighting/12961310-b58f-407d-ae08-c1b9ddbc3762/export Tue, 10 Jun 2025 16:31:46 +0000 https://db.gcve.eu/sighting/3da0dbc0-e11c-43cf-b32d-1c132620b436/export {"uuid": "3da0dbc0-e11c-43cf-b32d-1c132620b436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43590", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43590\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-06-10T16:22:58.626Z\n\ud83d\udccf Modified: 2025-06-10T16:22:58.626Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-53.html", "creation_timestamp": "2025-06-10T16:31:49.000000Z"} {"uuid": "3da0dbc0-e11c-43cf-b32d-1c132620b436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-43590", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43590\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-06-10T16:22:58.626Z\n\ud83d\udccf Modified: 2025-06-10T16:22:58.626Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-53.html", "creation_timestamp": "2025-06-10T16:31:49.000000Z"} https://db.gcve.eu/sighting/3da0dbc0-e11c-43cf-b32d-1c132620b436/export Tue, 10 Jun 2025 16:31:49 +0000