CVE-2025-5475 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with t...

CVE-2025-52917

The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests...

CVE-2025-6367

creationtimestamp| type| source ---|---|--- 2025-06-20 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls34mb6m4d2a 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6370

creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19084 2025-06-21 01:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fo2yiva2r 2025-06-30 20:26:56+00:00| seen|...

CVE-2025-6371

creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19083 2025-06-21 01:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fwzgtqg2u 2025-06-30 20:26:56+00:00| seen|...

CVE-2025-48945

creationtimestamp| type| source ---|---|--- 2025-06-20 22:17:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32xtf4sd2m 2025-06-23 10:52:45+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lsbg3gzerk2h...

CVE-2025-34022

creationtimestamp| type| source ---|---|--- 2025-06-20 22:04:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32asqvqg2p 2025-06-21 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7no4eb2i 2025-06-22 01:29:32+00:00| seen|...

CVE-2025-25037

creationtimestamp| type| source ---|---|--- 2025-06-20 22:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls324ddez72m 2025-06-21 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ngo6k2u 2025-06-23 20:47:21+00:00| published-proof-of-concept|...

CVE-2025-34024

creationtimestamp| type| source ---|---|--- 2025-06-20 21:50:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zhacfsy23 2025-06-21 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7ntq752e 2025-06-30 20:27:00+00:00| seen|...

CVE-2025-6365

creationtimestamp| type| source ---|---|--- 2025-06-20 20:44:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19063 2025-06-20 21:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zudqsab2m...

CVE-2025-48945

pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...

CVE-2025-34030

An OS command injection vulnerability exists in sar2html version 3.2.2 and prior via the plot parameter in index.php. The application fails to sanitize user-supplied input before using it in a system-level context. Remote, unauthenticated attackers can inject shell commands by appending them to t...

CVE-2025-4976

creationtimestamp| type| source ---|---|--- 2025-06-20 18:53:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114717202753199427 2025-07-24 06:41:24+00:00| seen| https://bsky.app/profile/potato.software/post/3luowin6wuo2y...

CVE-2025-34024

The Edimax EW-7438RPn wireless signal amplifier (firmware version 1.13 and prior ) contains an OS command injection vulnerability. The root cause is the improper handling of user-supplied input to the command parameter in the /goform/mp endpoint via the mp.asp form handler. An authenticated attac...

CVE-2025-34021

The CVE-2025-34021 affects Selea Targa IP OCR-ANPR cameras (iZero, Targa 512, 504, Semplice, 704 TKM, 805, 710 INOX, 750, 704 ILB). Root cause: unvalidated JSON POST fields ipnotify_address and url used for image fetch/DNS checks, enabling an SSRF. Impact: remote unauthenticated attackers can for...

GHSA-G3QG-6746-3MG9

creationtimestamp| type| source ---|---|--- 2025-06-20 17:46:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19015...

CVE-2025-6357 code-projects Simple Pizza Ordering System paymentportal.php sql injection

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /paymentportal.php. The manipulation of the argument person leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-48059

PowSyBl Power System Blocks is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 and com.powsybl:powsybl-contingency-api versions 5.0.0 to before 6.3.0, there is a a potential polynomial Regular Expression Denial of Service...

CVE-2025-5416

creationtimestamp| type| source ---|---|--- 2025-06-20 16:45:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19002 2025-06-20 20:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2u7rxbu72r...

CVE-2025-52825

creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:11+00:00| seen| Telegram/jX3P-npZhepmJEJEvfrnYKXIW1DnkYbd7t33-vEA6eRgmU 2025-06-20 17:13:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2jwwgwvn2m 2025-06-23 16:47:12+00:00| published-proof-of-concept|...