{"vulnerability": "cve-2025-1791", "sightings": [{"uuid": "7d1850fd-9f27-40d3-8fb2-909aa5f24ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "Telegram/oifamibZC_tGvQEwXqYVNsQN1G7y5Hq6xT0OimiyGYpwN5et", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"}, {"uuid": "5b896897-feea-42ec-85bc-6964797fa691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "https://t.me/cvedetector/19236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1791 - Zorlan SkyCaiji Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1791 \nPublished : March 1, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument save_data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T16:27:02.000000Z"}, {"uuid": "f27459c9-0aff-4842-be97-10baa970894b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}]}