CVE-2025-6951

A vulnerability classified as problematic was found in SAFECAM X300 up to 20250611. This vulnerability affects unknown code of the component FTP Service. The manipulation leads to use of default credentials. Access to the local network is required for this attack to succeed. The exploit has been...

CVE-2024-49365 tiny-secp256k1 allows for verify() bypass when running in bundled environment

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can be made passing on verify, when global Buffer is the buffer package. This affects only environments where require'buffer' is the NPM buffer package. Buffer.isBuffer check can b...

CVE-2025-6936

creationtimestamp| type| source ---|---|--- 2025-07-01 00:07:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19991 2025-07-01 00:30:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lsugzj6nce2c 2025-07-01 04:20:20+00:00| seen|...

CVE-2025-6910

creationtimestamp| type| source ---|---|--- 2025-06-30 15:06:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19934 2025-06-30 17:36:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstpw5ki5u2a...

CVE-2025-53416 File Parsing Deserialization of Untrusted Data in DTN Soft

Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution...

CVE-2025-40734

creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19914 2025-06-30 13:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstbi7df4d2p...

CVE-2025-38088

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

CVE-2025-38089

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19908 2025-06-30 11:13:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst2io2txr2r 2025-07-02 08:43:25+00:00| published-proof-of-concept|...

CVE-2025-53076

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2...

CVE-2025-38086

In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during miinwayrestart In miinwayrestart the code attempts to call mii-mdioread which is ch9200mdioread. ch9200mdioread utilises a local buffer called "buff", which is initialised with...

CVE-2025-53075

creationtimestamp| type| source ---|---|--- 2025-06-30 01:54:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19887 2025-06-30 07:53:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsspclf4e52q...

CVE-2025-53075

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2...

CVE-2015-20112

RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network...

CVE-2025-6864

SeaCMS up to 13.2 contains a cross-site request forgery (CSRF) vulnerability in an unknown function of /admin_type.php. The issue can be exploited remotely and exploit details have been publicly disclosed. CVSS data indicate network access, low attack complexity, no privileges required, and user ...

CVE-2025-52774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infility Infility Global infility-global allows Reflected XSS.This issue affects Infility Global: from n/a through = 2.15.11...

CVE-2025-52824

Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile DJ Manager: from n/a through = 1.7.8.3...

CVE-2025-28998

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in serpednet SERPed.net serped-net allows PHP Local File Inclusion.This issue affects SERPed.net: from n/a through = 4.6...

CVE-2025-5878

creationtimestamp| type| source ---|---|--- 2025-06-29 11:53:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19861 2025-06-29 14:45:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqvuovvpm2a 2025-11-26 22:13:04+00:00| seen|...

CVE-2025-6857

A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5Gnodecmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

CVE-2025-6853 chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...