CVE-2025-32975

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:33+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5rwjf3c22 2025-06-24 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233551699855 2025-06-24 05:45:06+00:00| seen|...

CVE-2025-52566

CVE-2025-52566 affects llama.cpp (tokenizer in llama_vocab::tokenize). Prior to version b5721, a signed vs. unsigned integer overflow enables heap-overflow during tokenization, causing unintended behavior in token copying. This could enable heap-related issues during inference with crafted input....

CVE-2025-52570 Letmein connection limiter allows an arbitrary amount of simultaneous connections

Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simultaneously incoming connections TCP, UDP and Unix socket for the services letmeind and letmeinfwd. Therefore, the command line option...

CVE-2025-31196

creationtimestamp| type| source ---|---|--- 2025-06-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-418/...

CVE-2025-48467

CVE-2025-48467 (Denial of Service via Malformed Modbus Packets) has concrete details in connected documents: multiple sources report a DoS causing repeated reboots leading to remote unavailability, affecting Advantech WISE-series devices (WISE-4010LAN, WISE-4050LAN, WISE-4060LAN). The root cause ...

CVE-2025-34035

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 02:47:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19294 2025-06-24 04:56:16+00:00| seen|...

CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...

CVE-2025-52558

Changedetection.io prior to version 0.50.4 is affected by a cross-site scripting (XSS) vulnerability caused by errors in filters during page-change detection watches. The issue can allow an attacker to inject malicious scripts into a user’s browser. The vulnerability has been patched in version 0...

CVE-2025-46101

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in jsonscorm.php file...

CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

CVE-2025-6511

creationtimestamp| type| source ---|---|--- 2025-06-23 09:35:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114731996519003743 2025-06-23 16:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19214 2025-06-23 17:31:42+00:00| published-proof-of-concept|...

CVE-2025-52935 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

CVE-2025-52937

CVE-2025-52937 affects PointCloudLibrary (PCL) in the surface/src/3rdparty/opennurbs modules, tied to the crc32.C file. Affected condition: PCL version older than 1.14.0 or when WITH_SYSTEM_ZLIB=FALSE. The CVE description indicates a vulnerability with低 severity (CVSS v4 base score 2.0, LOW impac...

CVE-2025-45786

Real Estate Management 1.0 is vulnerable to Cross Site Scripting XSS in /store/index.php...

CVE-2025-6494

creationtimestamp| type| source ---|---|--- 2025-06-23 02:04:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsail3lzhc2a 2025-06-30 20:08:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19974...

CVE-2025-6497

CVE-2025-6497 affects HTACG tidy-html5 5.8.0. The vulnerability targets the function prvTidyParseNamespace in src/parser.c , with manipulation leading to a reachable assertion. Reports indicate a local attack vector and that the exploit has been disclosed publicly. Some sources classify exploit m...

CVE-2025-6496

A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been...

CVE-2025-6497

A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/parser.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public an...

CVE-2025-6493

A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/markdown.js of the component Markdown Mode. This manipulation causes inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-6490

A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic. This issue affects the function hashmapsetwithhash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be approach...