CVE-2025-32799

CVE-2025-32799 affects conda-build prior to 25.4.0, where tar entry path sanitization allows path traversal (Tarslip) in created/extracted archives. Attacks could overwrite files outside the extraction directory, potentially leading to privilege escalation or code execution. A fix is available in...

CVE-2025-6179

creationtimestamp| type| source ---|---|--- 2025-06-16 17:26:39+00:00| seen| https://bsky.app/profile/potato.software/post/3lrqitgt44s2p 2025-06-16 17:38:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18486 2025-06-16 19:30:29+00:00| seen|...

CVE-2025-49125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18453 2025-06-16 15:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693644318306796 2025-06-16 15:19:46+00:00| seen| https://seclists.org/oss-sec/2025/q2/253...

CVE-2025-6165

creationtimestamp| type| source ---|---|--- 2025-06-16 14:08:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693431824068032 2025-06-17 06:39:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18568 2025-06-17 07:00:59+00:00| published-proof-of-concept|...

RHEL 8 : grafana (RHSA-2025:9070)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9070 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http: Request...

CVE-2025-6089

A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic. This vulnerability affects unknown code of the file atCheckJS.aspx. The manipulation of the argument ref leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2008-3648

creationtimestamp| type| source ---|---|--- 2025-06-14 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrltx6lvhx2c 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ee598518-08b0-4876-bc77-301d1f14e876...

CVE-2025-44951

creationtimestamp| type| source ---|---|--- 2025-06-14 11:09:49+00:00| seen| https://gist.github.com/scemodicecosa/6d878d6074f0e2f4a8fb69e9864068b7 2025-06-14 11:10:43+00:00| seen| https://gist.github.com/scemodicecosa/8643fbfc9490f40e955e9f9e9b0d9077 2025-06-18 18:33:16+00:00|...

CVE-2025-29646

creationtimestamp| type| source ---|---|--- 2025-06-14 11:07:41+00:00| seen| https://gist.github.com/scemodicecosa/581fa485f957239ea5551daa173d0189 2025-06-18 18:33:16+00:00| published-proof-of-concept| Telegram/0Gqa7yHMLnSRMpvEBFkbS1bZwf-5Db-LyNODVg59tHDTKas 2025-06-18 19:46:17+00:00| seen|...

CVE-2025-23092

creationtimestamp| type| source ---|---|--- 2025-06-14 04:31:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrk4lpvw2l2s 2025-06-24 00:13:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscsszhwa325...

CVE-2025-33108

creationtimestamp| type| source ---|---|--- 2025-06-14 01:11:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114679054387365513 2025-06-14 01:30:24+00:00| seen| Telegram/d1J3xn7UeCxXhThh1IbXPbusKEkegDhcNj29swj3f6PzcI 2025-06-14 01:36:15+00:00| seen|...

CVE-2025-25215

creationtimestamp| type| source ---|---|--- 2025-06-13 21:36:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18343 2025-06-13 23:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrjkchgzdj2k 2025-06-14 21:53:08+00:00| seen|...

CVE-2025-25050 Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerability

An out-of-bounds write vulnerability exists in the cvupgradesensorfirmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an out-of-bounds write. An attacker can issue an API call to...

CVE-2025-49583

XWiki is a generic wiki platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationEmailRendererClass object, and later an admin edits and saves that document, the email templates in this object will be used for notifications. No malicious code can ...

CVE-2025-49583 XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right

XWiki is a generic wiki platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationEmailRendererClass object, and later an admin edits and saves that document, the email templates in this object will be used for notifications. No malicious code can ...

CVE-2025-6052

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

CVE-2024-38824

Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...

CVE-2025-22238

creationtimestamp| type| source ---|---|--- 2025-06-13 07:28:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrhvuuxu5im2 2025-06-13 07:33:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18275 2025-06-13 11:06:16+00:00| seen|...

CVE-2025-5938

creationtimestamp| type| source ---|---|--- 2025-06-13 02:33:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18245 2025-06-13 05:11:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhoeb6taj2k...

CVE-2025-4233

CVE-2025-4233 affects Palo Alto Networks Prisma Access Browser. The connected sources describe an insufficient implementation of cache vulnerability that enables bypassing certain data control policies (root cause: inadequate cache handling in the browser). Documents consistently tie the issue to...