CVE-2025-6422

creationtimestamp| type| source ---|---|--- 2025-06-21 22:42:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19132 2025-06-22 02:20:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5yz7bifh2a...

CVE-2025-6420

creationtimestamp| type| source ---|---|--- 2025-06-21 21:47:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19130 2025-06-21 22:31:34+00:00| published-proof-of-concept| Telegram/PyJlSwi8jdNUrP0ZQH6ZpEvRZ26d84GFio1rTwIcDtG0Kjo 2025-06-22 02:30:50+00:00| seen|...

CVE-2025-6415

creationtimestamp| type| source ---|---|--- 2025-06-21 19:43:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19126 2025-06-21 20:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5dwd3cwp2p...

CVE-2025-6416 PHPGurukul Art Gallery Management System changeimage4.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-6406

creationtimestamp| type| source ---|---|--- 2025-06-21 14:46:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19117 2025-06-21 15:32:09+00:00| published-proof-of-concept| Telegram/Assw9VrEEJe4EVrWIRhlcCccZizPVDVnNzwWmu7SwOXbOgE 2025-06-21 18:04:00+00:00| seen|...

CVE-2025-3221

creationtimestamp| type| source ---|---|--- 2025-06-21 13:31:36+00:00| published-proof-of-concept| Telegram/CdEjlQS48pmmYiRue1iSIop0mM6ShG3UfxdkOWB5soYPM-I 2025-06-21 13:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pbgfcpl23 2025-06-21 16:14:03+00:00| seen|...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-3221

CVE-2025-3221: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by a Denial of Service due to insufficient validation of incoming request resources. The vulnerability has CVSS v3.1 base score 7.5 (HIGH), with network access, low attack complexity, no privileges re...

CVE-2025-6404

creationtimestamp| type| source ---|---|--- 2025-06-21 12:43:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19114 2025-06-21 13:31:36+00:00| published-proof-of-concept| Telegram/CdEjlQS48pmmYiRue1iSIop0mM6ShG3UfxdkOWB5soYPM-I 2025-06-21 14:03:48+00:00| seen|...

CVE-2025-6402

creationtimestamp| type| source ---|---|--- 2025-06-21 08:42:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19111 2025-06-21 09:00:28+00:00| published-proof-of-concept| Telegram/D-PRaJTVC5F51Kwf5F1hR78izfVdwcUAlCsI8kX7jHshE9M 2025-06-21 11:13:40+00:00| seen|...

CVE-2025-5034

The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2025-6399

creationtimestamp| type| source ---|---|--- 2025-06-21 04:03:09+00:00| published-proof-of-concept| Telegram/Wkmo48b48G0HhmpT1hoWuZ2qGdeD3nRgP5J0NW5LvqYONP0 2025-06-21 04:46:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19106 2025-06-21 06:09:49+00:00| seen|...

CVE-2025-52487

creationtimestamp| type| source ---|---|--- 2025-06-21 03:45:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19103 2025-06-21 04:03:09+00:00| published-proof-of-concept| Telegram/Wkmo48b48G0HhmpT1hoWuZ2qGdeD3nRgP5J0NW5LvqYONP0 2025-06-21 05:56:46+00:00| seen|...

CVE-2025-52485

CVE-2025-52485 affects DNN Platform (DotNetNuke) before version 10.0.1. Versions 6.0.0 to

CVE-2025-52556

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR's embedded certificates up to the trust...

CVE-2025-52557

Summary: CVE-2025-52557 affects Mail-0’s Zero Email Solution, specifically version 0.8, due to improper sanitization in email handling which enables an attacker to craft an email that executes JavaScript and can cause session hijacking. Root cause: stored XSS stemming from insufficient sanitizati...

CVE-2025-6393

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request...

CVE-2025-5479

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicio...

CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...

CVE-2025-6393

TOTOLINK TOTOLINK A702R/A3002R/A3002RU/EX1200T devices (3.0.0-B20230809.1615 to 4.1.2cu.5232 B20210713) are affected by a vulnerability in the HTTP POST Request Handler, specifically in the unknown function of the file /boafrm/formIPv6Addr. The issue arises when the submit-url argument is manipul...