CVE-2025-2962

CVE-2025-2962 affects Zephyr RTOS (Zephyr project)

CVE-2025-34036

creationtimestamp| type| source ---|---|--- 2025-06-24 04:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdbaarm5e2a 2025-06-24 13:50:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19333 2025-06-25 21:02:23+00:00| seen|...

CVE-2025-47943

CVE-2025-47943 affects Gogs (self-hosted Git service). The vulnerability is a stored XSS in the PDF rendering path, caused by an outdated pdfjs-1.4.20 component located under public/plugins/. Affected versions are 0.14.0+dev and prior. The issue has been fixed in gogs.io/gogs with version 0.13.3 ...

CVE-2025-52560

creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19300 2025-06-24 05:38:10+00:00| seen|...

CVE-2025-32976

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:50+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5sellqp2e 2025-06-24 03:33:08+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233573230003 2025-06-24 05:55:07+00:00| seen|...

CVE-2025-52566 llama.cpp tokenizer signed vs. unsigned heap overflow

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-6552

A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/com/hope/controller/WebController.java of the component Login. The manipulation of the argument redirecturl leads to open redirect. It is...

CVE-2025-48466

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks...

CVE-2025-52574

SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from the server's /etc/passwd by default. In v1.0.1, a whitelist was added that limits reading to only files under priv/data. This issue has been patched in version 1.0.1...

CVE-2025-52570 Letmein connection limiter allows an arbitrary amount of simultaneous connections

Letmein is an authenticating port knocker. Prior to version 10.2.1, The connection limiter is implemented incorrectly. It allows an arbitrary amount of simultaneously incoming connections TCP, UDP and Unix socket for the services letmeind and letmeinfwd. Therefore, the command line option...

CVE-2025-34040

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19281 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:25+00:00| seen|...

CVE-2025-34033

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 03:48:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19302 2025-06-24 04:36:14+00:00| seen|...

CVE-2025-34034

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 03:48:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19303 2025-06-24 04:18:50+00:00| seen|...

CVE-2025-34033

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...

CVE-2025-6533

creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19276 2025-06-24 04:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdalvamqs2i...

CVE-2025-6524

creationtimestamp| type| source ---|---|--- 2025-06-24 00:31:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscttcfsai2q 2025-06-24 17:49:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19387...

CVE-2025-32977

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 allows unauthenticated users to upload backup files to the system. While signature validation is implemented,...

WordPress Conference Scheduler plugin <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via className Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Conference Scheduler versions = 2.5.1...

CVE-2025-49144

creationtimestamp| type| source ---|---|--- 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414 2025-06-23 20:33:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgkgjxoj25 2025-06-24 02:21:49+00:00| seen|...

CVE-2025-6547

creationtimestamp| type| source ---|---|--- 2025-06-23 20:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscgbi44ax2r 2025-06-23 20:32:26+00:00| published-proof-of-concept| Telegram/O2eh7gLrpcZbONgN5-OX68m3ZbpQKWlr4HE62LMc1M7414...