CVE-2025-38083

creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18933 2025-07-30 17:02:49+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv73zcnzx327 2025-07-30 17:03:19+00:00| seen|...

CVE-2025-38083

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-4981

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequence...

CVE-2022-49949

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Fix memory leak in firmware upload In the case of firmware-upload, an instance of struct fwupload is allocated in firmwareuploadregister. This data needs to be freed in fwdevrelease. Create a new fwuploadfree...

CVE-2025-5125

creationtimestamp| type| source ---|---|--- 2025-06-20 09:47:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzqzud2o62p 2025-06-23 20:47:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19266...

CVE-2025-6323

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18921 2025-06-20 09:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzrgd4ege2m 2025-06-20 10:01:43+00:00| published-proof-of-concept|...

CVE-2025-6317 code-projects Online Shoe Store confirm.php sql injection

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-6308

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18908 2025-06-20 07:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzkmsiutp2k...

CVE-2025-6311

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18905 2025-06-20 06:31:32+00:00| published-proof-of-concept| Telegram/Lsxkp67itTa1h5mACVQNiU5Bk8pr3DRiHX80nXnZXGxgJw 2025-06-20 09:43:29+00:00| seen|...

CVE-2025-6295

creationtimestamp| type| source ---|---|--- 2025-06-20 02:31:56+00:00| published-proof-of-concept| Telegram/6w51Kjdt9vYT230GwENazQBSLqlWx5Y6Wp6oJ95ehWRNg 2025-06-20 02:43:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18898 2025-06-20 03:43:14+00:00| seen|...

CVE-2025-6294

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 03:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz5evdygm25 2025-06-23 18:50:42+00:00| published-proof-of-concept|...

CVE-2025-6296 code-projects Hostel Management System empty_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6291

A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function dofile of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2025-48058 PowSyBl Core contains Polynomial REDoS’es

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service ReDoS vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause...

CVE-2025-48058

PowSyBl Core contains a polynomial ReDoS vulnerability in the DataSource mechanism (affecting listNames regex handling) prior to version 6.7.2. Exploitation can cause high CPU due to regex backtracking. The issue has been patched in com.powsybl:powsybl-commons:6.7.2 and related patches in 6.7.2+;...

CVE-2025-6276

creationtimestamp| type| source ---|---|--- 2025-06-20 00:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqf6n75w2k 2025-06-23 19:47:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19257...

CVE-2025-38083

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32878

The COROS PACE 3 GPS sports watch, running firmware versions through 3.0808.0 , is vulnerable to a man-in-the-middle (MitM) attack due to improper certificate validation . The device fails to validate the X.509 server certificate during the TLS handshake when requesting firmware information from ...

CVE-2025-32877

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefore allows machine-in-the-middle...