CVE-2025-6323

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18921 2025-06-20 09:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzrgd4ege2m 2025-06-20 10:01:43+00:00| published-proof-of-concept|...

CVE-2025-6317 code-projects Online Shoe Store confirm.php sql injection

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-6308

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18908 2025-06-20 07:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzkmsiutp2k...

CVE-2025-6311

creationtimestamp| type| source ---|---|--- 2025-06-20 05:43:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18905 2025-06-20 06:31:32+00:00| published-proof-of-concept| Telegram/Lsxkp67itTa1h5mACVQNiU5Bk8pr3DRiHX80nXnZXGxgJw 2025-06-20 09:43:29+00:00| seen|...

CVE-2025-6295

creationtimestamp| type| source ---|---|--- 2025-06-20 02:31:56+00:00| published-proof-of-concept| Telegram/6w51Kjdt9vYT230GwENazQBSLqlWx5Y6Wp6oJ95ehWRNg 2025-06-20 02:43:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18898 2025-06-20 03:43:14+00:00| seen|...

CVE-2025-6294

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 03:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz5evdygm25 2025-06-23 18:50:42+00:00| published-proof-of-concept|...

CVE-2025-6296 code-projects Hostel Management System empty_rooms.php sql injection

A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /emptyrooms.php. The manipulation of the argument searchbox leads to sql injection. The attack may be launched remotely. The...

CVE-2025-6291

A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function dofile of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2025-48058 PowSyBl Core contains Polynomial REDoS’es

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service ReDoS vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause...

CVE-2025-48058

PowSyBl Core contains a polynomial ReDoS vulnerability in the DataSource mechanism (affecting listNames regex handling) prior to version 6.7.2. Exploitation can cause high CPU due to regex backtracking. The issue has been patched in com.powsybl:powsybl-commons:6.7.2 and related patches in 6.7.2+;...

CVE-2025-6276

creationtimestamp| type| source ---|---|--- 2025-06-20 00:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqf6n75w2k 2025-06-23 19:47:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19257...

CVE-2025-32878

COROS PACE 3 vulnerable through version 3.0808.0 due to unvalidated X.509 server certificates during TLS handshakes when the device connects to WLAN to fetch firmware info. An active MITM with a self-signed cert can eavesdrop and manipulate HTTPS, potentially stealing the user’s API access token....

CVE-2025-38083

In the Linux kernel, the following vulnerability has been resolved: netsched: prio: fix a race in priotune Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time. The race is as follows: CPU 0 CPU 1 1: lock root 2: qdisctreeflushbacklog 3: unlock root | ...

CVE-2025-32880

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It implements a function to connect the watch to a WLAN. With WLAN access, the COROS Pace 3 downloads firmware files via HTTP. However, the communication is not encrypted and allows sniffing and machine-in-the-middle attacks...

CVE-2025-32877

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or output capabilities, which results in the use of the Just Works pairing method. This method does not implement any authentication, which therefore allows machine-in-the-middle...

CVE-2025-6286

creationtimestamp| type| source ---|---|--- 2025-06-19 23:40:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18890 2025-06-20 00:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqx3knqn2r...

CVE-2025-6286

The CVE-2025-6286 entry concerns PHPGurukul COVID19 Testing Management System 2021. The vulnerability is an open redirect caused by manipulating the q parameter in an unknown function within /search-report-result.php. Public disclosure is noted, and exploitation could be remote. Various connected...

CVE-2025-6279

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18884 2025-06-19 23:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryp5vph2e25...

CVE-2025-47293

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18881 2025-06-19 23:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrypwr7obe2o...

CVE-2025-6278

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...