PT-2025-26583 · Xiaomi · Xiaomi Mi Connect Service App

Name of the Vulnerable Software and Affected Versions: Xiaomi Mi Connect Service APP affected versions not specified Description: An unauthorized access issue exists due to flawed validation logic in the Xiaomi Mi Connect Service APP, allowing attackers to gain unauthorized access to devices...

CVE-2025-6490

creationtimestamp| type| source ---|---|--- 2025-06-22 19:46:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19173 2025-06-22 22:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsa35kkjrt2r...

CVE-2025-6482

creationtimestamp| type| source ---|---|--- 2025-06-22 15:45:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19165 2025-06-22 16:01:26+00:00| published-proof-of-concept| Telegram/JXdIHA4NW6c606ZHTElBxltbVcdKBOZ3nM5pnGiNcLowVzU 2025-06-22 18:12:12+00:00| seen|...

CVE-2025-6473

creationtimestamp| type| source ---|---|--- 2025-06-22 11:45:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19159 2025-06-22 12:18:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls72gn7wuh2o...

CVE-2025-6471

creationtimestamp| type| source ---|---|--- 2025-06-22 09:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19155 2025-06-22 11:02:15+00:00| published-proof-of-concept| Telegram/YeFYh1iVxD7vZ8phK8qYl1Wq64u4XdAoI5ujoIe-890GAg 2025-06-22 12:13:53+00:00| seen|...

CVE-2025-6470

creationtimestamp| type| source ---|---|--- 2025-06-22 09:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19156 2025-06-22 10:00:59+00:00| published-proof-of-concept| Telegram/Jd45ez6KYq7RYvuZO3WcHJzdDbJx2m9Ss-jlaMAfjYY7w6Y 2025-06-22 12:28:54+00:00| seen|...

CVE-2025-52918

creationtimestamp| type| source ---|---|--- 2025-06-21 23:43:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19136 2025-06-22 02:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5xwocd5w2a 2025-08-07 10:00:00+00:00| seen|...

CVE-2025-6417

creationtimestamp| type| source ---|---|--- 2025-06-21 20:45:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19128 2025-06-21 23:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5r46aotd2a 2026-07-22 05:00:05+00:00| seen|...

CVE-2025-6412

creationtimestamp| type| source ---|---|--- 2025-06-21 17:45:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19121 2025-06-21 20:08:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5e7bkamg2i...

CVE-2025-6411

creationtimestamp| type| source ---|---|--- 2025-06-21 17:45:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19122 2025-06-21 20:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5ei7yr222o...

CVE-2025-6407

creationtimestamp| type| source ---|---|--- 2025-06-21 14:46:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19116 2025-06-21 15:32:09+00:00| published-proof-of-concept| Telegram/Assw9VrEEJe4EVrWIRhlcCccZizPVDVnNzwWmu7SwOXbOgE 2025-06-21 17:59:00+00:00| seen|...

CVE-2025-6401

creationtimestamp| type| source ---|---|--- 2025-06-21 06:42:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19108 2025-06-21 09:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4btwkfkt2o...

CVE-2025-52552

creationtimestamp| type| source ---|---|--- 2025-06-21 03:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19098 2025-06-21 06:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3vvomwoo25...

Zero 安全漏洞

Zero is an email application from Zero Open Source. A security vulnerability exists in Zero version 0.8 that stems from improper email cleanup and could lead to session hijacking...

CVE-2025-34030

creationtimestamp| type| source ---|---|--- 2025-06-20 22:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls342ebwgm2r 2025-06-21 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nyp3a2k 2025-08-26 01:12:33+00:00| published-proof-of-concept|...

CVE-2025-6352

creationtimestamp| type| source ---|---|--- 2025-06-20 20:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2twthurc2m 2025-06-23 17:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19243...

Hackers Use Social Engineering to Target Expert on Russian Operations

Citizen Lab and Google uncovered a new, sophisticated cyberattack linked to Russian state actors that exploits App-Specific Passwords, bypassing Multi-Factor Authentication. Discover how to protect yourself from these evolving threats...

CVE-2025-49989

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through = 5.5.6...

CVE-2025-49989 WordPress App Builder plugin <= 5.5.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in App Cheap App Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects App Builder: from n/a through 5.5.3...

CVE-2025-49989 WordPress App Builder plugin <= 5.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through = 5.5.6...