CVE-2025-32878

COROS PACE 3 vulnerable through version 3.0808.0 due to unvalidated X.509 server certificates during TLS handshakes when the device connects to WLAN to fetch firmware info. An active MITM with a self-signed cert can eavesdrop and manipulate HTTPS, potentially stealing the user’s API access token....

CVE-2025-38083

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32877

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefore allows machine-in-the-middle...

CVE-2025-6286

creationtimestamp| type| source ---|---|--- 2025-06-19 23:40:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18890 2025-06-20 00:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqx3knqn2r...

CVE-2025-6286

The CVE-2025-6286 entry concerns PHPGurukul COVID19 Testing Management System 2021. The vulnerability is an open redirect caused by manipulating the q parameter in an unknown function within /search-report-result.php. Public disclosure is noted, and exploitation could be remote. Various connected...

CVE-2025-6279

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18884 2025-06-19 23:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryp5vph2e25...

CVE-2025-47293

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18881 2025-06-19 23:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrypwr7obe2o...

CVE-2025-6278

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

CVE-2025-6274

creationtimestamp| type| source ---|---|--- 2025-06-19 19:43:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18878 2025-06-19 19:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryci26cef2m...

CVE-2025-6273

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...

CVE-2025-6272

creationtimestamp| type| source ---|---|--- 2025-06-19 18:41:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18876 2025-06-19 20:03:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrycyo5rsi2s...

CVE-2025-6273

creationtimestamp| type| source ---|---|--- 2025-06-19 18:41:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18875 2025-06-19 20:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrye4hvukr23...

CVE-2022-50150

REJECTED CVE In the Linux kernel, the following vulnerability has been resolved: mwifiex: fix sleep in atomic context bugs caused by devcoredumpv...

CVE-2025-36050

creationtimestamp| type| source ---|---|--- 2025-06-19 17:41:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18874 2025-06-19 20:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrydkl24l42s...

CVE-2025-33121

creationtimestamp| type| source ---|---|--- 2025-06-19 17:40:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18873 2025-06-19 18:02:29+00:00| seen| Telegram/mV5RUt-ErcEv8IWl-QMPKS-gDP3S7xJltTWYiLhYR65BNak 2025-06-19 19:58:30+00:00| seen|...

CVE-2025-50200

RabbitMQ is a messaging and streaming broker. In versions 3.13.7 and prior, RabbitMQ is logging authorization headers in plaintext encoded in base64. When querying RabbitMQ api with HTTP/s with basic authentication it creates logs with all headers in request, including authorization headers which...

CVE-2022-50069

In the Linux kernel, the following vulnerability has been resolved: BPF: Fix potential bad pointer dereference in bpfsysbpf The bpfsysbpf helper function allows an eBPF program to load another eBPF program from within the kernel. In this case the argument union bpfattr pointer as well as the insn...

CVE-2025-6270

creationtimestamp| type| source ---|---|--- 2025-06-19 16:45:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18868 2025-06-19 19:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrybvvtmvw2u...

CVE-2022-50146

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Deallocate EPC memory on dwpcieepinit errors If dwpcieepinit fails to perform any action after the EPC memory is initialized and the MSI memory region is allocated, the latter parts won't be undone thus causing a memory...