Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1. This affects an unknown part of the file /api/file/upload. The manipulation of the argument file/source leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Attention, elevated activities detected targeting quequnlong shiyi-blog (CVE-2025-5509) https://vuldb.com/?ctiid.310923
Post summary
Elevated activity has been detected targeting quequnlong shiyi-blog for CVE‑2025‑5509, suggesting that the vulnerability is being actively exploited, though no PoC, exploit code, patch, or technical details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | quequnlong | shiyi-blog | - | - | - |