{"vulnerability": "cve-2018-2504", "sightings": [{"uuid": "2e20b4a5-2a02-44a3-bd63-fe7e0bba6bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25049", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2018-25049\n\ud83d\udd25 CVSS Score: 3 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2022-12-27T08:10:40.816Z\n\ud83d\udccf Modified: 2025-04-11T16:47:01.141Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.216854\n2. https://vuldb.com/?ctiid.216854\n3. https://github.com/nmanousos/email-existence/pull/37\n4. https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56", "creation_timestamp": "2025-04-11T17:51:23.000000Z"}, {"uuid": "45685ba0-e579-4f12-aa75-75055d0c8fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25048", "type": "seen", "source": "https://t.me/cibsecurity/60552", "content": "\u203c CVE-2018-25048 \u203c\n\nThe CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T13:49:42.000000Z"}, {"uuid": "ab041f78-b886-4a3f-b7a7-6df1118bd11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25046", "type": "seen", "source": "https://t.me/cibsecurity/55452", "content": "\u203c CVE-2018-25046 \u203c\n\nDue to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T00:12:04.000000Z"}, {"uuid": "f9d304bd-ac31-4194-be2f-ff603bfa2376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25049", "type": "seen", "source": "https://t.me/cibsecurity/55390", "content": "\u203c CVE-2018-25049 \u203c\n\nA vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T12:28:02.000000Z"}, {"uuid": "d1ac5166-0cc7-4a46-810f-e4929e299d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25043", "type": "seen", "source": "https://t.me/cibsecurity/44717", "content": "\u203c CVE-2018-25043 \u203c\n\nA vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:26.000000Z"}, {"uuid": "bb3c1255-6a9c-4aab-8861-e4fafddc2613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-25042", "type": "seen", "source": "https://t.me/cibsecurity/44727", "content": "\u203c CVE-2018-25042 \u203c\n\nA vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:37.000000Z"}]}