CVE-2025-3221

creationtimestamp| type| source ---|---|--- 2025-06-21 13:31:36+00:00| published-proof-of-concept| Telegram/CdEjlQS48pmmYiRue1iSIop0mM6ShG3UfxdkOWB5soYPM-I 2025-06-21 13:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pbgfcpl23 2025-06-21 16:14:03+00:00| seen|...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-3221

CVE-2025-3221: IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by a Denial of Service due to insufficient validation of incoming request resources. The vulnerability has CVSS v3.1 base score 7.5 (HIGH), with network access, low attack complexity, no privileges re...

CVE-2025-6404

creationtimestamp| type| source ---|---|--- 2025-06-21 12:43:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19114 2025-06-21 13:31:36+00:00| published-proof-of-concept| Telegram/CdEjlQS48pmmYiRue1iSIop0mM6ShG3UfxdkOWB5soYPM-I 2025-06-21 14:03:48+00:00| seen|...

CVE-2025-6402

creationtimestamp| type| source ---|---|--- 2025-06-21 08:42:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19111 2025-06-21 09:00:28+00:00| published-proof-of-concept| Telegram/D-PRaJTVC5F51Kwf5F1hR78izfVdwcUAlCsI8kX7jHshE9M 2025-06-21 11:13:40+00:00| seen|...

CVE-2025-5034

The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2025-6399

creationtimestamp| type| source ---|---|--- 2025-06-21 04:03:09+00:00| published-proof-of-concept| Telegram/Wkmo48b48G0HhmpT1hoWuZ2qGdeD3nRgP5J0NW5LvqYONP0 2025-06-21 04:46:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19106 2025-06-21 06:09:49+00:00| seen|...

CVE-2025-52487

creationtimestamp| type| source ---|---|--- 2025-06-21 03:45:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19103 2025-06-21 04:03:09+00:00| published-proof-of-concept| Telegram/Wkmo48b48G0HhmpT1hoWuZ2qGdeD3nRgP5J0NW5LvqYONP0 2025-06-21 05:56:46+00:00| seen|...

CVE-2025-52485

CVE-2025-52485 affects DNN Platform (DotNetNuke) before version 10.0.1. Versions 6.0.0 to

CVE-2025-52556

rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR's embedded certificates up to the trust...

CVE-2025-52557

Summary: CVE-2025-52557 affects Mail-0’s Zero Email Solution, specifically version 0.8, due to improper sanitization in email handling which enables an attacker to craft an email that executes JavaScript and can cause session hijacking. Root cause: stored XSS stemming from insufficient sanitizati...

CVE-2025-6393

A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1.2cu.5232B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request...

CVE-2025-5479

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicio...

CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has bee...

CVE-2025-6393

TOTOLINK TOTOLINK A702R/A3002R/A3002RU/EX1200T devices (3.0.0-B20230809.1615 to 4.1.2cu.5232 B20210713) are affected by a vulnerability in the HTTP POST Request Handler, specifically in the unknown function of the file /boafrm/formIPv6Addr. The issue arises when the submit-url argument is manipul...

CVE-2025-5475 Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability

Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with t...

CVE-2025-52917

The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive requests...

CVE-2025-6367

creationtimestamp| type| source ---|---|--- 2025-06-20 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls34mb6m4d2a 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6370

creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19084 2025-06-21 01:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fo2yiva2r 2025-06-30 20:26:56+00:00| seen|...

CVE-2025-6371

creationtimestamp| type| source ---|---|--- 2025-06-20 22:44:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19083 2025-06-21 01:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3fwzgtqg2u 2025-06-30 20:26:56+00:00| seen|...