{"vulnerability": "cve-2025-34045", "sightings": [{"uuid": "899b60e5-361c-4f25-b4c2-7fe3ddbd4217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjz7x5jv24", "content": "", "creation_timestamp": "2025-06-27T21:02:22.050787Z"}, {"uuid": "625ca3a4-f6c2-4e95-8b8a-81da1b42c167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernoyd523", "content": "", "creation_timestamp": "2025-10-31T21:02:50.636624Z"}, {"uuid": "f47012d1-aec0-4edf-b4b9-2feaa3bbccd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "86ce5684-0d7f-4daf-b3d5-7b0907767c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "69ff3322-6603-4086-9ac2-91252635e7b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "3e87c038-8235-484f-b05e-16c656c0128c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "deae611f-8b25-4c37-a21c-5a9a8a4b2edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-28)", "content": "", "creation_timestamp": "2026-03-28T00:00:00.000000Z"}, {"uuid": "7184879d-417d-4e88-b6e0-ded7aeb3c055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19632", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34045\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code.\n\ud83d\udccf Published: 2025-06-26T15:51:37.884Z\n\ud83d\udccf Modified: 2025-06-26T15:51:37.884Z\n\ud83d\udd17 References:\n1. https://www.cnvd.org.cn/flaw/show/CNVD-2020-68596\n2. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2020/CNVD-2020-68596.yaml\n3. https://vulncheck.com/advisories/weiphp-path-traversal-file-read", "creation_timestamp": "2025-06-26T16:51:50.000000Z"}, {"uuid": "a945ead4-7c79-412b-a19b-a7b6dddb9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "6bebc679-32b8-4f46-b896-c4a24ce59a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "a830d961-b59c-4631-b724-dbe1687e230a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/83ba592d-7747-44fc-83d2-4e1915ca39a1", "content": "", "creation_timestamp": "2026-06-19T12:42:36.401973Z"}, {"uuid": "d83291cf-f0af-4b3f-a34e-39235a47b018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:07.355649Z"}, {"uuid": "e7c79f43-152c-4fb9-929a-0488605b7e85", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f0de8c97-3ae0-471e-af51-f05d476ae250", "content": "", "creation_timestamp": "2026-07-01T05:54:06.923916Z"}, {"uuid": "69bde173-403d-4a06-b03a-d51f3ba8447f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "84aa3c93-c921-4587-8b06-e0c428b2f706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "b18ae7e2-ade7-4359-a83d-0fbf6b178e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "50bea1ff-297b-460f-ad7e-d1846fae3870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "b45a96ef-35b0-48b8-8cd5-654bf5d3f4b0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81b50c8d-d3c7-4dfe-8526-b6e8d6fac5e3", "content": "", "creation_timestamp": "2026-06-19T12:45:41.444804Z"}, {"uuid": "9f12d0e4-87fc-4a67-961b-1199e63b73e5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/339f4e2c-0db2-4c67-b42f-2638b849e8b9", "content": "", "creation_timestamp": "2026-06-23T14:03:09.695861Z"}, {"uuid": "32b56a60-6a66-4b25-8f21-3672e1d2c8db", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-34045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ade6c5b-1f6d-4406-921e-9d673207b20d", "content": "", "creation_timestamp": "2026-06-30T09:23:54.083402Z"}]}