CVE-2025-6939

creationtimestamp| type| source ---|---|--- 2025-07-01 06:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsv2tnmvrr2q...

CVE-2025-6840

A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-6931

creationtimestamp| type| source ---|---|--- 2025-06-30 23:06:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19989 2025-07-01 01:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsuiybkzpl2s...

CVE-2025-6554

creationtimestamp| type| source ---|---|--- 2025-06-30 21:39:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774478268589016 2025-07-01 01:00:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsuipd2pak2v 2025-07-01 04:30:00+00:00| seen|...

CVE-2025-49521

creationtimestamp| type| source ---|---|--- 2025-06-30 21:09:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19976 2025-06-30 21:42:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774492584600634 2025-06-30 23:40:08+00:00| seen|...

CVE-2025-49520

creationtimestamp| type| source ---|---|--- 2025-06-30 21:09:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19975 2025-06-30 21:42:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774492584600634 2025-06-30 23:35:08+00:00| seen|...

CVE-2025-52901 File Browser allows sensitive data to be transferred in URL

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.33.9, access tokens are used as GET parameters. The JSON Web Token JWT which is used as a session identifier will get leaked to...

CVE-2025-45931

creationtimestamp| type| source ---|---|--- 2025-06-30 19:08:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19967 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947 2026-08-14 16:00:10+00:00| seen| https://t.me/purpsec/833...

CVE-2025-26074

creationtimestamp| type| source ---|---|--- 2025-06-30 17:07:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19946 2025-06-30 19:48:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774041391786813 2025-07-16 14:42:16+00:00| seen|...

CVE-2025-53017

creationtimestamp| type| source ---|---|--- 2025-06-30 16:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstnpadb7i25...

CVE-2025-47871 Mattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive informatio...

CVE-2025-38089

A flaw was found in the Linux kernel, where a specially crafted RPC packet could cause data corruption or trigger a system panic. This flaw allows a remote attacker who can make RPC calls to send an intentionally malformed packet, potentially compromising system integrity or causing a denial of...

CVE-2025-2895

creationtimestamp| type| source ---|---|--- 2025-06-30 15:06:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19931 2025-06-30 17:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsto5y6meo2i...

CVE-2025-53415

creationtimestamp| type| source ---|---|--- 2025-06-30 12:50:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lst7w6ara32m 2025-07-01 08:09:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20009 2025-07-10 10:00:00+00:00| seen|...

CVE-2025-52997

creationtimestamp| type| source ---|---|--- 2025-06-30 12:36:31+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-cm2r-rg7r-p7gg 2025-06-30 21:15:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsu45eu47z2p...

CVE-2025-6900

creationtimestamp| type| source ---|---|--- 2025-06-30 09:05:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19912 2025-06-30 13:06:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lstattqwxc2r...

CVE-2025-6898

creationtimestamp| type| source ---|---|--- 2025-06-30 08:52:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lsssmmgfkd23 2025-06-30 09:05:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19918 2025-06-30 11:03:15+00:00| seen|...

CVE-2025-38088 powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region si...

BELL-CVE-2025-38085

Bulletin has no description...

CVE-2025-6889

creationtimestamp| type| source ---|---|--- 2025-06-30 05:55:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19900 2025-06-30 07:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssmz62hdn2m...