CVE-2025-34069

creationtimestamp| type| source ---|---|--- 2025-07-02 13:56:11+00:00| seen| https://bsky.app/profile/potato.software/post/3lsyejtnlt62s 2025-07-02 14:36:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784141478579135...

CVE-2024-8419

The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication...

CVE-2025-6437

creationtimestamp| type| source ---|---|--- 2025-07-02 09:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxvdy2lq42a...

CVE-2025-27021

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem command line tool. This could allow sensitive information disclosure, denial of service, and privilege escalation by...

CVE-2025-27023 Improper Input Validation in Infinera G42

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the feature of executing a restricted set of...

CVE-2025-24331 Nokia Single RAN baseband OAM service extensive capabilities

The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabilities before dropping to an unprivileged level. The capabilities retained from the root period are considered extensive after the privile...

CVE-2025-6017 Rhacm: users with clusterreader role can see credentials from managed-clusters

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to...

CVE-2025-6463 Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entrydeleteuploadfiles' function in all versions up to, and including, 1.44.2. This makes it possible for...

CVE-2025-6686

creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20099 2025-07-02 09:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsxwyfszry2m...

CVE-2025-6686 Magic Buttons for Elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via magic-button Shortcode

The Magic Buttons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's magic-button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2022-37450

creationtimestamp| type| source ---|---|--- 2025-07-01 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lswluwv7jh27 2026-06-19 12:47:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ad06381-3010-461b-a1d8-d2e5e954b632...

CVE-2025-53100

creationtimestamp| type| source ---|---|--- 2025-07-01 18:05:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779298982762165 2025-07-01 18:09:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20070...

CVE-2025-53103 JUnit OpenTestReportGeneratingListener can leak Git credentials

JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...

CVE-2025-6297

The CVE-2025-6297 issue affects the dpkg-deb component, where improper sanitization of directory permissions when extracting a control member into a temporary directory can leave temporary files and lead to DoS via disk quota exhaustion or full disks. Affected: dpkg- and debian-based tooling acro...

CVE-2025-6959

creationtimestamp| type| source ---|---|--- 2025-07-01 15:27:48+00:00| seen| https://bsky.app/profile/potato.software/post/3lsvz6pn7b52s 2025-07-01 16:08:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20062...

CVE-2025-34062

creationtimestamp| type| source ---|---|--- 2025-07-01 15:07:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20045 2025-08-06 13:54:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:23+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

CVE-2025-49483

creationtimestamp| type| source ---|---|--- 2025-07-01 12:10:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20020 2025-07-01 12:26:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:08:26+00:00| seen|...

CVE-2025-49491

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux trafficstat modules allows Resource Leak Exposure. This vulnerability is associated with program files trafficstat/trafficservice/trafficservice.C. This issue affects...

CVE-2025-49492

creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20015 2025-07-01 12:26:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 12:50:46+00:00| seen|...

CVE-2024-46993

creationtimestamp| type| source ---|---|--- 2025-07-01 06:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv3fkjsmp2r 2025-08-06 13:54:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:24+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...