CVE-2025-6709

The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication. This can be reproduced using the mongo shell to send a malicious JSON payload leading to an invariant failure and server crash. Thi...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

CVE-2025-5813 Amazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcta2wgetamazonproductcallback function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to create n...

CVE-2025-5559 TimeZoneCalculator <= 3.37 - Authenticated (Contributor+) Stored Cross-Site Scripting

The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalculatoroutput' shortcode in all versions up to, and including, 3.37 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2025-6527

A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The complexity of an attack is...

CVE-2025-6652

CVE-2025-6652 concerns the PDF-XChange Editor PRC file parsing vulnerability. The flaw arises from insufficient validation during PRC data handling, allowing an out-of-bounds read that could disclose sensitive information. Exploitation requires user interaction (target must visit a malicious page...

CVE-2025-6654 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2025-45333

berkeley-abc abc 1.1 contains a Null Pointer Dereference NPD vulnerability in the AbcNtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

CVE-2025-45332

vkoskiv c-ray 1.1 contains a Null Pointer Dereference NPD vulnerability in the parsemtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

CVE-2025-6445 ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability

ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ServiceStack. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2024-57708

creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19468 2025-06-27 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjzasxp227 2025-07-26 21:02:25+00:00| seen|...

CVE-2025-6430

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19452 2025-06-27 13:40:29+00:00| seen| https://t.me/ptswarm/237 2025-06-28 06:16:08+00:00| seen| https://poliverso.org/objects/0477a01e-97b3e0a9-4476130521c6750c 2025-09-01...

CVE-2024-27685

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19445 2025-06-25 16:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzbtikpi2r...

Moderate: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2025-52967

gatewayproxyhandler in MLflow before 3.1.0 lacks gatewaypath validation...

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

CVE-2025-53021

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the...

CVE-2025-6433

creationtimestamp| type| source ---|---|--- 2025-06-24 16:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lseje2ar5n2a 2026-04-13 17:56:26+00:00| seen| Telegram/2lmY4PxMcctl1EtJ4ibPRxsoFbGfFPPqdEaD1gjW88BKsUA...

CVE-2025-39202

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19338 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02...

CVE-2025-6206 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticimageeditorajaxsubmit' function in all versions up to, and including, 2.5.0. This makes...