CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

CVE-2025-53021

A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey can be obtained without authentication and reused within the OAuth2 login flow, resulting in the victim's session being linked to the...

CVE-2025-6433

creationtimestamp| type| source ---|---|--- 2025-06-24 16:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lseje2ar5n2a 2026-04-13 17:56:26+00:00| seen| Telegram/2lmY4PxMcctl1EtJ4ibPRxsoFbGfFPPqdEaD1gjW88BKsUA...

CVE-2025-39202

creationtimestamp| type| source ---|---|--- 2025-06-24 13:50:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19338 2025-07-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02...

CVE-2025-6206 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticimageeditorajaxsubmit' function in all versions up to, and including, 2.5.0. This makes...

CVE-2025-32975

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:33+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5rwjf3c22 2025-06-24 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233551699855 2025-06-24 05:45:06+00:00| seen|...

CVE-2025-52566

CVE-2025-52566 affects llama.cpp (tokenizer in llama_vocab::tokenize). Prior to version b5721, a signed vs. unsigned integer overflow enables heap-overflow during tokenization, causing unintended behavior in token copying. This could enable heap-related issues during inference with crafted input....

CVE-2025-52570 Letmein connection limiter allows an arbitrary amount of simultaneous connections

Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simultaneously incoming connections TCP, UDP and Unix socket for the services letmeind and letmeinfwd. Therefore, the command line option...

CVE-2025-31196

creationtimestamp| type| source ---|---|--- 2025-06-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-418/...

CVE-2025-48467

CVE-2025-48467 (Denial of Service via Malformed Modbus Packets) has concrete details in connected documents: multiple sources report a DoS causing repeated reboots leading to remote unavailability, affecting Advantech WISE-series devices (WISE-4010LAN, WISE-4050LAN, WISE-4060LAN). The root cause ...

CVE-2025-34035

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 02:47:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19294 2025-06-24 04:56:16+00:00| seen|...

CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...

CVE-2025-52558

Changedetection.io prior to version 0.50.4 is affected by a cross-site scripting (XSS) vulnerability caused by errors in filters during page-change detection watches. The issue can allow an attacker to inject malicious scripts into a user’s browser. The vulnerability has been patched in version 0...

CVE-2025-46101

SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in jsonscorm.php file...

CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

CVE-2025-6511

creationtimestamp| type| source ---|---|--- 2025-06-23 09:35:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114731996519003743 2025-06-23 16:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19214 2025-06-23 17:31:42+00:00| published-proof-of-concept|...

CVE-2025-52935 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

CVE-2025-52937

CVE-2025-52937 affects PointCloudLibrary (PCL) in the surface/src/3rdparty/opennurbs modules, tied to the crc32.C file. Affected condition: PCL version older than 1.14.0 or when WITH_SYSTEM_ZLIB=FALSE. The CVE description indicates a vulnerability with低 severity (CVSS v4 base score 2.0, LOW impac...

CVE-2025-45786

Real Estate Management 1.0 is vulnerable to Cross Site Scripting XSS in /store/index.php...

CVE-2025-6494

creationtimestamp| type| source ---|---|--- 2025-06-23 02:04:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsail3lzhc2a 2025-06-30 20:08:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19974...