CVE-2025-45880

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s...

CVE-2024-56917

creationtimestamp| type| source ---|---|--- 2025-06-24 19:47:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19389 2025-06-25 01:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfi4rcjgd2i...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

CVE-2025-6032

Podman vulnerability CVE-2025-6032: the podman machine init flow fails to verify TLS when downloading VM images from an OCI registry, enabling a potential Man-in-the-Middle. Affected component is Podman/libpod; impact is high (confidentiality, integrity, availability). Mitigation references indic...

CVE-2025-39203

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19356 2025-07-03 10:00:00+00:00| seen|...

CVE-2025-6424

CVE-2025-6424: Use-after-free in FontFaceSet causing potentially exploitable crash in Firefox (affected: Firefox <140, ESR <115.25, ESR

CVE-2025-6206

creationtimestamp| type| source ---|---|--- 2025-06-24 08:50:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19322 2025-06-24 10:29:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdva6rkxk2a...

CVE-2025-36519

creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19315 2025-06-24 06:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdgoveqnr2a...

GHSA-2QP5-C2VQ-G2WW

creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19310...

CVE-2025-2962

CVE-2025-2962 affects Zephyr RTOS (Zephyr project)

CVE-2025-34036

creationtimestamp| type| source ---|---|--- 2025-06-24 04:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdbaarm5e2a 2025-06-24 13:50:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19333 2025-06-25 21:02:23+00:00| seen|...

CVE-2025-47943

CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...

CVE-2025-52560

creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19300 2025-06-24 05:38:10+00:00| seen|...

CVE-2025-32976

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:50+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5sellqp2e 2025-06-24 03:33:08+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233573230003 2025-06-24 05:55:07+00:00| seen|...

CVE-2025-52566 llama.cpp tokenizer signed vs. unsigned heap overflow

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-6552

A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/com/hope/controller/WebController.java of the component Login. The manipulation of the argument redirecturl leads to open redirect. It is...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

CVE-2025-52574

SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from the server's /etc/passwd by default. In v1.0.1, a whitelist was added that limits reading to only files under priv/data. This issue has been patched in version 1.0.1...

CVE-2025-52570 Letmein connection limiter allows an arbitrary amount of simultaneous connections

Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simultaneously incoming connections TCP, UDP and Unix socket for the services letmeind and letmeinfwd. Therefore, the command line option...

CVE-2025-34040

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19281 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:25+00:00| seen|...