CVE-2025-25032

creationtimestamp| type| source ---|---|--- 2025-06-11 18:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18122 2025-06-11 20:16:15+00:00| seen| Telegram/d4nUwsOBOdQROW01SEnvlRo6E92wcWw7AWRntwHKYeAQB4 2025-06-11 21:33:14+00:00| seen|...

CVE-2025-40912

CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode. CryptX embeds the tomcrypt library. The versions of that library in CryptX before 0.065 may be susceptible to CVE-2019-17362...

CVE-2025-49652

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled...

CVE-2025-49150 Cursor Agent Potentially Leaks Information using JSON schema

Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary HTTP GET request that does not require user confirmation. Since the Cursor Agent...

CVE-2025-40915

creationtimestamp| type| source ---|---|--- 2025-06-11 17:34:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18098 2025-06-11 20:16:04+00:00| published-proof-of-concept| Telegram/ph88y4G5oeScgD258CchMKrpr3BuS4k3KcSxkFOuLvPbbMI 2025-06-11 23:24:01+00:00| seen|...

CVE-2025-25032

IBM Cognos Analytics is affected by a memory-resource exhaustion denial-of-service vulnerability (CVE-2025-25032) impacting versions 11.2.0 through 12.0.4. An authenticated user can trigger a crafted request that exhausts memory, potentially impacting availability. Affected products/versions incl...

CVE-2025-4673

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...

CVE-2025-22874

Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon...

CVE-2025-40915 Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens

Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand function...

CVE-2025-48444

creationtimestamp| type| source ---|---|--- 2025-06-11 17:09:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdvk3wrex2s...

CVE-2025-32291

Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through 11.1.0...

CVE-2025-49297

Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through = 1.6...

CVE-2025-49279

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogvy blogvy allows PHP Local File Inclusion.This issue affects Blogvy: from n/a through = 1.0.7...

CVE-2025-31638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7...

CVE-2025-39475

Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through = 6.0.3...

CVE-2024-22363

creationtimestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen| https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c...

CVE-2025-49710

creationtimestamp| type| source ---|---|--- 2025-06-11 15:27:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpulf2dk2m 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-13 22:36:03+00:00| seen|...

CVE-2025-5986

creationtimestamp| type| source ---|---|--- 2025-06-11 15:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdplmts5z2o...

CVE-2025-5687

creationtimestamp| type| source ---|---|--- 2025-06-11 15:12:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdozpv4nw2e 2025-06-14 04:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18351 2026-04-13 17:56:13+00:00| seen|...

CVE-2025-49146

pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...