{"vulnerability": "CVE-2025-3850", "sightings": [{"uuid": "0cdc068e-7979-4c2a-9fc3-28c04ddfa8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz3svtq2d", "content": "", "creation_timestamp": "2025-04-22T03:04:31.085388Z"}, {"uuid": "4679daf3-112f-4474-a977-a22d74c09049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyyu6v5eai2o", "content": "", "creation_timestamp": "2025-09-17T03:07:34.252422Z"}, {"uuid": "3cbf99d2-145e-4d9d-9857-257afe2af108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3cf149656ee2fecb0dc2f32bcb63a7bc", "content": "", "creation_timestamp": "2025-09-17T06:22:05.000000Z"}, {"uuid": "cb7e98a5-bdc8-4f97-9853-9734c6bddd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwjdgodwp42u", "content": "", "creation_timestamp": "2025-08-16T12:07:22.410134Z"}, {"uuid": "b51c8960-51fe-4299-b03f-0b4468e2c343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyuzsvro6f2f", "content": "", "creation_timestamp": "2025-09-15T14:37:35.436273Z"}, {"uuid": "2eda66ac-c66f-4eb8-960d-b2a3c57f078f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/168", "content": "", "creation_timestamp": "2025-09-15T12:24:25.000000Z"}, {"uuid": "f01db7cf-c456-4187-9851-68c2dab13b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38500", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa77dk4m26", "content": "", "creation_timestamp": "2025-12-12T13:50:13.142435Z"}, {"uuid": "37d90e45-f325-4d53-8e20-48cad143173e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "64d1665e-c28a-48da-85f1-95a7583722d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38503", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "99d574ba-1e9b-428d-bbea-379ba86dc605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38507", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4385d89f-536a-466b-b3ca-a9d82246bce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38503", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c24e84d8-a90e-4350-bfc6-011e29c880aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38500", "type": "published-proof-of-concept", "source": "Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU", "content": "", "creation_timestamp": "2026-01-07T17:07:30.000000Z"}, {"uuid": "aaa635c2-8cd9-4854-859e-60c6165e51d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38502", "type": "published-proof-of-concept", "source": "Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU", "content": "", "creation_timestamp": "2026-01-07T17:07:30.000000Z"}, {"uuid": "979a3f2e-4b68-41f4-ad55-cfa4585a28b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "aa0748f2-77d9-4fd8-aea8-ca9a72abd3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "b3308ea4-e4ba-45e8-8edb-18ab8e7f1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3850", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12777", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3850\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-22T00:00:12.706Z\n\ud83d\udccf Modified: 2025-04-22T00:00:12.706Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.305777\n2. https://vuldb.com/?ctiid.305777\n3. https://vuldb.com/?submit.556284\n4. https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/73\n5. https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/75", "creation_timestamp": "2025-04-22T01:02:26.000000Z"}, {"uuid": "ec5af58f-46a2-4245-9893-3197be1965da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51682", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-38501, KSMBDrain\nURL\uff1ahttps://github.com/keymaker-arch/KSMBDrain\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-15T09:21:06.000000Z"}, {"uuid": "f8ea09a1-dec8-47b9-8d8e-e7d7eccd5217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/51671", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-38501, KSMBDrain\nURL\uff1ahttps://github.com/keymaker-arch/KSMBDrain\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-15T08:28:07.000000Z"}, {"uuid": "54825de5-6130-4f81-8879-589c082936d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "published-proof-of-concept", "source": "Telegram/vj0C90C8RT1gtVwnCm3zIFJVWsC4fi-5iu_TpgsbTjU2S4Y", "content": "", "creation_timestamp": "2025-09-15T11:00:09.000000Z"}, {"uuid": "814f30ec-ab7c-4462-a31e-fa74c92201e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38501", "type": "published-proof-of-concept", "source": "Telegram/xb62eZAQKB8BwAALH8nOtpsamtKVvJuleZ8oAvp1Cyh0Yhg", "content": "", "creation_timestamp": "2025-09-15T15:00:07.000000Z"}, {"uuid": "34120479-b8d3-4845-80d9-67b658ef509a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3850", "type": "seen", "source": "https://t.me/cvedetector/23471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3850 - YXJ2018 SpringBoot-Vue-OnlineExam Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3850 \nPublished : April 22, 2025, 1:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T04:11:16.000000Z"}, {"uuid": "5435180d-8a89-4202-87d7-c2b89c39e87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "3f11d59b-13aa-4afc-a8af-3a67601ddb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38502", "type": "published-proof-of-concept", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "content": "", "creation_timestamp": "2026-09-15T00:00:22.476081Z"}, {"uuid": "1f9da077-c606-4651-8827-483b11661beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "content": "", "creation_timestamp": "2026-09-14T03:00:13.095241Z"}, {"uuid": "db270623-c525-4b93-811e-656bb376726f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T18:00:00.000000Z"}]}