CVE-2025-40734

creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19914 2025-06-30 13:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstbi7df4d2p...

CVE-2025-38088

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

CVE-2025-38089

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...

CVE-2025-53076

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2...

CVE-2025-38086

In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during miinwayrestart In miinwayrestart the code attempts to call mii-mdioread which is ch9200mdioread. ch9200mdioread utilises a local buffer called "buff", which is initialised with...

CVE-2025-53075

creationtimestamp| type| source ---|---|--- 2025-06-30 01:54:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19887 2025-06-30 07:53:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsspclf4e52q...

CVE-2025-53075

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2...

CVE-2015-20112

RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network...

CVE-2025-6864

SeaCMS up to 13.2 contains a cross-site request forgery (CSRF) vulnerability in an unknown function of /admin_type.php. The issue can be exploited remotely and exploit details have been publicly disclosed. CVSS data indicate network access, low attack complexity, no privileges required, and user ...

CVE-2025-52774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infility Infility Global infility-global allows Reflected XSS.This issue affects Infility Global: from n/a through = 2.15.11...

CVE-2025-52824

Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile DJ Manager: from n/a through = 1.7.8.3...

CVE-2025-28998

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in serpednet SERPed.net serped-net allows PHP Local File Inclusion.This issue affects SERPed.net: from n/a through = 4.6...

CVE-2025-5878

creationtimestamp| type| source ---|---|--- 2025-06-29 11:53:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19861 2025-06-29 14:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqvuovvpm2a 2025-11-26 22:13:04+00:00| seen|...

CVE-2025-6857

A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5Gnodecmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

CVE-2025-6853 chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...

CVE-2025-6844

creationtimestamp| type| source ---|---|--- 2025-06-29 04:55:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19850 2025-06-29 06:29:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsq26tqqm32p...

CVE-2025-6825 TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6882

creationtimestamp| type| source ---|---|--- 2025-06-28 15:26:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114761686186116660 2025-06-30 02:55:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19893 2025-06-30 07:03:54+00:00| seen|...

CVE-2025-6881

creationtimestamp| type| source ---|---|--- 2025-06-28 15:12:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114761631259650289 2025-06-30 01:54:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19890 2025-06-30 03:34:51+00:00| seen|...

CVE-2025-38084 mm/hugetlb: unshare page tables during VMA split, not before

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, splitvma triggers hugetlb page table unsharing through vmops-maysplit. This happens before the VMA lock and rmap locks are taken - which is too early, it...