CVE-2025-39203

creationtimestamp| type| source ---|---|--- 2025-06-24 13:02:06+00:00| seen| Telegram/b5DYkbguYKKC6SWHwVUadkrQ9RB3hxTshwlycvFN8u4r2U4 2025-06-24 14:46:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19356 2025-07-03 10:00:00+00:00| seen|...

CVE-2025-6424

A use-after-free vulnerability exists in the FontFaceSet interface of Mozilla products, specifically affecting Firefox , Firefox ESR , and Thunderbird . This memory error can be exploited by an attacker to trigger a service failure (denial of service). The vulnerability has been addressed in Fire...

CVE-2025-6206

creationtimestamp| type| source ---|---|--- 2025-06-24 08:50:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19322 2025-06-24 10:29:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdva6rkxk2a...

CVE-2025-36519

creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19315 2025-06-24 06:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdgoveqnr2a...

GHSA-2QP5-C2VQ-G2WW

creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19310...

CVE-2025-2962

CVE-2025-2962 affects Zephyr RTOS (Zephyr project)

CVE-2025-34036

creationtimestamp| type| source ---|---|--- 2025-06-24 04:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdbaarm5e2a 2025-06-24 13:50:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19333 2025-06-25 21:02:23+00:00| seen|...

CVE-2025-47943

CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...

CVE-2025-52560

creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19300 2025-06-24 05:38:10+00:00| seen|...

CVE-2025-32976

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:50+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5sellqp2e 2025-06-24 03:33:08+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233573230003 2025-06-24 05:55:07+00:00| seen|...

CVE-2025-52566 llama.cpp tokenizer signed vs. unsigned heap overflow

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-6552

A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/com/hope/controller/WebController.java of the component Login. The manipulation of the argument redirecturl leads to open redirect. It is...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

CVE-2025-52574

SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from the server's /etc/passwd by default. In v1.0.1, a whitelist was added that limits reading to only files under priv/data. This issue has been patched in version 1.0.1...

CVE-2025-52570 Letmein connection limiter allows an arbitrary amount of simultaneous connections

Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simultaneously incoming connections TCP, UDP and Unix socket for the services letmeind and letmeinfwd. Therefore, the command line option...

CVE-2025-34040

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19281 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:25+00:00| seen|...

CVE-2025-34033

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 03:48:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19302 2025-06-24 04:36:14+00:00| seen|...

CVE-2025-34034

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 03:48:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19303 2025-06-24 04:18:50+00:00| seen|...

CVE-2025-34033

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...

CVE-2025-6533

creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19276 2025-06-24 04:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdalvamqs2i...