CVE-2025-47871 Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive informatio...

CVE-2025-38089

A flaw was found in the Linux kernel, where a specially crafted RPC packet could cause data corruption or trigger a system panic. This flaw allows a remote attacker who can make RPC calls to send an intentionally malformed packet, potentially compromising system integrity or causing a denial of...

CVE-2025-2895

creationtimestamp| type| source ---|---|--- 2025-06-30 15:06:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19931 2025-06-30 17:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsto5y6meo2i...

CVE-2025-53415

creationtimestamp| type| source ---|---|--- 2025-06-30 12:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst7w6ara32m 2025-07-01 08:09:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20009 2025-07-10 10:00:00+00:00| seen|...

CVE-2025-52997

creationtimestamp| type| source ---|---|--- 2025-06-30 12:36:31+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-cm2r-rg7r-p7gg 2025-06-30 21:15:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsu45eu47z2p...

CVE-2025-6900

creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19912 2025-06-30 13:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstattqwxc2r...

CVE-2025-6898

creationtimestamp| type| source ---|---|--- 2025-06-30 08:52:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lsssmmgfkd23 2025-06-30 09:05:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19918 2025-06-30 11:03:15+00:00| seen|...

CVE-2025-38088 powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

BELL-CVE-2025-38085

Bulletin has no description...

CVE-2025-6889

creationtimestamp| type| source ---|---|--- 2025-06-30 05:55:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19900 2025-06-30 07:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssmz62hdn2m...

CVE-2025-20701

creationtimestamp| type| source ---|---|--- 2025-06-30 04:18:42+00:00| published-proof-of-concept| https://t.me/CyberBulletin/3544 2025-06-30 05:30:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lsshdtlu522v 2025-06-30 06:34:54+00:00| seen|...

CVE-2025-20702

creationtimestamp| type| source ---|---|--- 2025-06-30 04:18:42+00:00| published-proof-of-concept| https://t.me/CyberBulletin/3544 2025-06-30 05:30:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lsshdtlu522v 2025-06-30 06:34:55+00:00| seen|...

CVE-2025-20700

creationtimestamp| type| source ---|---|--- 2025-06-30 04:18:42+00:00| published-proof-of-concept| https://t.me/CyberBulletin/3544 2025-06-30 05:30:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lsshdtlu522v 2025-06-30 06:34:54+00:00| seen|...

CVE-2025-53076

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2...

CVE-2025-38085

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugepmdunshare vs GUP-fast race hugepmdunshare drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table used in another process in...

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...

CVE-2025-6875

creationtimestamp| type| source ---|---|--- 2025-06-29 22:56:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19881 2025-06-30 00:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrwk7ke4j2p...

CVE-2025-6871

creationtimestamp| type| source ---|---|--- 2025-06-29 20:57:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19877 2025-06-30 00:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsrxds2ybu2r...

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

CVE-2025-53290

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anonymized-15272943 WP Visual Sitemap wp-visual-sitemap allows Stored XSS.This issue affects WP Visual Sitemap: from n/a through = 1.0.2...