PT-2025-27037 · Bharti Airtel · Bharti Airtel Thanks App

Name of the Vulnerable Software and Affected Versions: Bharti Airtel Thanks App version 4.105.4 Description: A problematic vulnerability has been found in the Bharti Airtel Thanks App, affecting an unknown function of the file /Android/data/com.myairtelapp/files/. This issue leads to cleartext...

WordPress App Builder plugin Improper Access Control Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress App Builder plugin suffers from an improper access control vulnerability that stems from a lack of authorization, and no detailed vulnerability details are provide...

CVE-2015-1000013

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkche4y2e...

CVE-2025-53122

creationtimestamp| type| source ---|---|--- 2025-06-26 20:51:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19655 2025-06-27 00:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskfpjpxde25...

CVE-2025-53121

creationtimestamp| type| source ---|---|--- 2025-06-26 19:50:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19650 2025-06-26 22:30:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsk6h7jnid2s...

CVE-2025-49592

creationtimestamp| type| source ---|---|--- 2025-06-26 19:50:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19646 2025-06-27 00:42:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskfug4idb2r...

CVE-2025-6694

creationtimestamp| type| source ---|---|--- 2025-06-26 18:59:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjsovnwdo2a...

CVE-2025-6709

creationtimestamp| type| source ---|---|--- 2025-06-26 17:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19639 2025-06-26 19:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsju3nvfee2a 2025-06-27 07:12:25+00:00| seen|...

CVE-2025-52477

CVE-2025-52477 affects Octo-STS, a GitHub App acting as a Security Token Service for the GitHub API. The vulnerability is an unauthenticated SSRF that can be triggered by abusing fields in OpenID Connect tokens, causing internal network requests and potential exposure of sensitive information in ...

Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to loss of confidentiality [CVE-2025-6545] [CVE-2025-6547]

Summary Node.js module pbkdf2 is used by IBM App Connect Enterprise Certified Container when accessing BAR files stored in COS S3 storage. IBM App Connect Enterprise Certified Container Dashboard operands that access BAR files stored in COS S3 storage are vulnerable to loss of confidentiality. Th...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)

Summary IBM App Connect Enterprise runtime, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to Remote Code Execution RCE and improper preservation of permissions due to jsonpath-plus & snowflake-sdk. Vulnerabilit...

CVE-2025-36034

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19613 2025-06-26 21:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjznilmpd2r...

CVE-2025-6699

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19612 2025-06-26 21:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsk2idv3cb2v...

CVE-2025-52887

creationtimestamp| type| source ---|---|--- 2025-06-26 14:52:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19610 2025-06-26 19:09:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjtasjsuw2u...

CVE-2025-6677

creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19595 2025-06-26 18:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjqzpbnul2i...

CVE-2025-52900

creationtimestamp| type| source ---|---|--- 2025-06-26 12:08:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jj2r-455p-5gvf 2025-06-26 14:51:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19606 2025-06-26...

CVE-2025-3771

creationtimestamp| type| source ---|---|--- 2025-06-26 11:51:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19587 2025-06-26 12:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5qbg5lc2a...

CVE-2025-52902

creationtimestamp| type| source ---|---|--- 2025-06-26 11:15:58+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4wx8-5gm2-2j97 2025-06-26 14:51:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19609 2025-06-26...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities in IBM Java SDK ( CVE-2025-21587,CVE-2025-30698 & CVE-2025-4447)

Summary There are multiple vulnerabilities in IBM Java SDK, Java Technology Edition used by IBM App Connect Enterprise and IBM Integration Bus for z/OS . Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allo...

CVE-2025-37101

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19577 2025-06-26 07:24:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiltljqjv2a 2025-06-26 12:29:08+00:00| seen|...