CVE-2025-46415

A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b...

CVE-2025-45729

The CVE-2025-45729 entry affects D-Link DIR-823-Pro hardware (version 1.02) and is caused by improper permission control that allows unauthorized users to turn on and access Telnet services. The documented impact is low for confidentiality, integrity, and availability, with network access as the ...

CVE-2025-46415

CVE-2025-46415 involves a race condition in the Nix, Lix, and Guix package managers that can lead to removal of content from arbitrary folders. The connected documents specify affected versions: Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; Guix before 1.4...

CVE-2025-4437

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

CVE-2015-0843

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf...

CVE-2018-10831

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkck2em2i 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f23ff3e-0e22-47c1-b47b-9697381af975...

CVE-2025-52904 File Browser: Command Execution not Limited to Scope

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions of the web application on the 2.x branch, all users have a scope assigned, and they only have access to the files within that scope. The...

CVE-2025-34046

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19631 2025-06-26 20:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjyh66y642r 2025-06-27 21:02:22+00:00| seen|...

CVE-2025-6701

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19627 2025-06-26 20:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjy4vrwjs2r...

CVE-2025-52887

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...

CVE-2025-52887 cpp-httplib has unlimited number of http header fields, which causes memory leak

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...

CVE-2025-6707

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior ...

CVE-2025-6677

creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19595 2025-06-26 18:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjqzpbnul2i...

CVE-2025-6624

creationtimestamp| type| source ---|---|--- 2025-06-26 10:35:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiwk3lf3n2r 2025-06-26 13:51:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19602...

CVE-2025-6212

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19583 2025-06-26 12:34:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj56eibgv2r...

CVE-2025-5459

A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0...

CVE-2025-6290

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19556 2025-06-26 06:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiiiamt2w2v...

CVE-2025-5929

CVE-2025-5929 – The Countdown WordPress plugin is reported to have a Stored Cross-Site Scripting vulnerability via the clientId parameter in versions up to and including 2.0.1. The vulnerability requires authentication at Contributor level or higher, and could allow an attacker to inject scripts ...

CVE-2024-11584

cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666 permissions, making it world-writable. This is used for the "/run/cloud-init/hook-hotplug-cmd" FIFO. An unprivileged user could trigger hotplug-hook commands...

CVE-2024-52928

Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites with previously granted permissions to add new permissions when the user clicks anywhere on the website...