{"vulnerability": "CVE-2025-4839", "sightings": [{"uuid": "9eb0ef16-ba02-405b-9faa-d42baf993fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4839", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16843", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4839\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-05-17T22:00:06.221Z\n\ud83d\udccf Modified: 2025-05-19T14:34:41.960Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309307\n2. https://vuldb.com/?ctiid.309307\n3. https://vuldb.com/?submit.574826\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250510-02.md", "creation_timestamp": "2025-05-19T14:38:26.000000Z"}, {"uuid": "65e64414-a855-410d-bde0-e9fab038be88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-48397", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4pnvhbmbk2s", "content": "", "creation_timestamp": "2025-11-03T09:01:44.186691Z"}, {"uuid": "d23691fd-171e-4b09-9ffc-9145c0abfca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48396", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pxlufcdik2", "content": "", "creation_timestamp": "2025-11-03T11:56:02.384525Z"}, {"uuid": "f29804f4-1d6b-473c-b5a1-ce585bf5bb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48397", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pxlwfcnu22", "content": "", "creation_timestamp": "2025-11-03T11:56:02.972910Z"}, {"uuid": "c0a7f266-4741-4550-8878-b0fec0fc2875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvpqax22t", "content": "", "creation_timestamp": "2025-05-18T01:13:00.427029Z"}, {"uuid": "973b2bc0-486f-483a-a03e-c7ac93a99c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvqst3tcgn2q", "content": "", "creation_timestamp": "2025-08-06T18:06:11.883291Z"}, {"uuid": "bcae859c-7afc-4226-a828-733aa3c3bc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48392", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/192", "content": "", "creation_timestamp": "2025-09-24T13:10:36.000000Z"}, {"uuid": "f762cecb-6445-445b-ad47-0bfda45fa5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48390", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5v66z5fa2", "content": "", "creation_timestamp": "2025-05-29T16:42:35.292411Z"}, {"uuid": "01ca66ac-e3d9-492e-ab5b-4b14bfc663be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqdcuhswxm2k", "content": "", "creation_timestamp": "2025-05-29T18:10:07.280499Z"}, {"uuid": "489cd90f-f584-4aad-bea9-d2d47723bf65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-4839", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszq7t67n2", "content": "", "creation_timestamp": "2025-05-18T00:39:59.362960Z"}, {"uuid": "b730e74a-c02b-438e-a4bd-93713f23589e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48397", "type": "seen", "source": "https://gist.github.com/Darkcrai86/6e80b3d16b5e8be1f27b25b39db2d198", "content": "", "creation_timestamp": "2025-11-03T09:14:49.000000Z"}, {"uuid": "39a505fe-9f55-44e7-864a-1f9d0953f1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4ppx7hlpp2s", "content": "", "creation_timestamp": "2025-11-03T09:38:30.446934Z"}, {"uuid": "be442206-980e-4576-9461-898f8095767b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48396", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4pqj4bvdc2n", "content": "", "creation_timestamp": "2025-11-03T09:48:30.927223Z"}, {"uuid": "55fbcdd3-8c23-43fb-ba83-4ed4192d5629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-48395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ly3kzgwf262o", "content": "", "creation_timestamp": "2025-09-05T11:36:15.223747Z"}]}