23592 matches found
CVE-2025-6860
creationtimestamp| type| source ---|---|--- 2025-06-29 13:57:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19865 2025-06-29 17:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsr5gcpe752i 2025-06-30 03:00:05+00:00| published-proof-of-concept|...
CVE-2024-49364
creationtimestamp| type| source ---|---|--- 2025-06-29 13:27:08+00:00| published-proof-of-concept| https://github.com/bitcoinjs/tiny-secp256k1/security/advisories/GHSA-7mc2-6phr-23xc 2025-07-01 06:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv4afurpu23...
CVE-2025-40910
Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...
CVE-2025-6843
creationtimestamp| type| source ---|---|--- 2025-06-29 03:53:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19846 2025-06-29 06:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsq2qqluli23...
CVE-2025-52993
A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...
CVE-2025-53391
creationtimestamp| type| source ---|---|--- 2025-06-28 21:55:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19832 2025-06-28 23:29:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lspcp7zaes2i 2025-06-30 13:59:29+00:00| seen|...
CVE-2025-6821
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19828 2025-06-28 22:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp6trlcnk2p...
CVE-2025-6822
creationtimestamp| type| source ---|---|--- 2025-06-28 18:54:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19826 2025-06-28 22:35:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsp7omuxwy2a...
CVE-2023-28910
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19819 2025-06-28 18:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsot2bdhed2i 2025-06-29 02:27:34+00:00| seen|...
CVE-2023-28903
creationtimestamp| type| source ---|---|--- 2025-06-28 15:55:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19812 2025-06-28 18:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsorfb4q6f2u...
CVE-2025-6818
creationtimestamp| type| source ---|---|--- 2025-06-28 15:53:53+00:00| seen| https://bsky.app/profile/potato.software/post/3lsojalx6jx2h 2025-06-28 15:55:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19823 2025-06-28 18:24:53+00:00| seen|...
CVE-2025-6817
creationtimestamp| type| source ---|---|--- 2025-06-28 11:54:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19809 2025-06-28 14:19:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsodyp3k352k...
CVE-2025-3771
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...
CVE-2025-6816
A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5Ofsinfoencode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to...
CVE-2025-5937
creationtimestamp| type| source ---|---|--- 2025-06-28 07:51:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19808 2025-06-28 10:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnyav4pla2s...
CVE-2025-53380
creationtimestamp| type| source ---|---|--- 2025-06-28 04:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsndkghnuv2p...
CVE-2025-6776
A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can b...
CVE-2025-52207
creationtimestamp| type| source ---|---|--- 2025-06-27 19:40:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmfg7nrju25 2025-09-19 21:02:38+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6tpujy23 2025-12-02 21:02:37+00:00| seen|...
CVE-2025-53093 TabberNeue vulnerable to Stored XSS through wikitext
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the tag. Version 3.1.1 contains a patch for the bug...
