CVE-2025-6090

creationtimestamp| type| source ---|---|--- 2025-06-15 15:01:05+00:00| published-proof-of-concept| Telegram/TsLN5vHLIfKrKMRd5r9uUcmCPeQ2tSHQaEnOQUJbKYy86yg 2025-06-15 15:39:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18381 2025-06-15 16:58:09+00:00| seen|...

CVE-2025-21085 PingFederate OAuth Grant attribute duplication may use excessive memory

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization...

CVE-2025-6089

creationtimestamp| type| source ---|---|--- 2025-06-15 13:36:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18376 2025-06-15 17:28:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrnyha2pnh2u 2026-01-30 09:01:36+00:00| seen|...

CVE-2025-36506

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...

CVE-2025-45986

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in the bsSetMacBlack function...

Konsole: Code execution

Background Konsole is KDE's terminal emulator. Description Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and execute arbitrary code. Impact Clicking a...

GLSA-202506-12 : sysstat: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202506-12 sysstat: Arbitrary Code Execution A vulnerability has been discovered in sysstat. Please review the CVE identifier referenced below for details. This CVE improves on an incomplete fix for CVE-2022-39377. Tenable has...

CVE-2025-6065

creationtimestamp| type| source ---|---|--- 2025-06-14 08:34:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18372 2025-06-14 09:32:18+00:00| seen| Telegram/C3UTwynst7UtmZY1a-TGsY39b-ZaceEinE1WZTPPvZFFkCA 2025-06-14 10:55:49+00:00| seen|...

CVE-2025-5589

CVE-2025-5589 affects StreamWeasels Kick Integration for WordPress; all versions up to 1.1.3 are vulnerable to Stored XSS via the status-classic-offline-text parameter due to insufficient input sanitization and output escaping. Exploitation requires Contributor+ authenticated access; successful a...

CVE-2025-50142

creationtimestamp| type| source ---|---|--- 2025-06-14 07:46:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkhhnht4w2r...

CVE-2025-5487

creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:16+00:00| seen| Telegram/EBVgSt7wdJnZGFN9mjaTpNjNL5ZnfETU-XEnqrbYo0IQesw 2025-06-14 07:37:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18358 2025-06-14 09:21:45+00:00| seen|...

CVE-2025-50143

creationtimestamp| type| source ---|---|--- 2025-06-14 07:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkgms3l2q2u...

CVE-2025-3234

creationtimestamp| type| source ---|---|--- 2025-06-14 06:31:02+00:00| seen| Telegram/VYwOw1FgS2rdituN2tqfuXTl8dguJ6e02sBRJ2-I5qUtm7g 2025-06-14 06:35:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18357 2025-06-14 09:16:45+00:00| seen|...

CVE-2025-6059

CVE-2025-6059 affects the WordPress plugin Seraphinite Accelerator (versions up to and including 2.27.21). The vulnerability is a Cross-Site Request Forgery (CSRF) due to missing or incorrect nonce validation in the function named OnAdminApi_CacheOpBegin. This flaw allows unauthenticated attacker...

CVE-2025-33108

CVE-2025-33108 affects IBM Backup, Recovery and Media Services for i versions 7.4 and 7.5. A BRMS program calling an unqualified library can allow a user with the capability to compile or restore a program to execute user-controlled code with host OS component access, enabling elevated privileges...

CVE-2025-24919

creationtimestamp| type| source ---|---|--- 2025-06-13 22:37:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18347 2025-06-13 23:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkueqdv52r 2025-08-06 13:05:54+00:00| seen|...

CVE-2025-6083

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...

CVE-2025-49598 conda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version Parsing

conda-forge-ci-setup is a package installed by conda-forge each time a build is run on CI. The conda-forge-ci-setup-feedstock setup script is vulnerable due to the unsafe use of the eval function when parsing version information from a custom-formatted meta.yaml file. An attacker controlling...

CVE-2025-49597

handcraftedinthealps goodby-csv is a highly memory efficient, flexible and extendable open-source CSV import/export library. Prior to 1.4.3, goodby-csv could be used as part of a chain of methods that is exploitable when an insecure deserialization vulnerability exists in an application. This...