Security Bulletin: IBM Maximo Application Suite uses jinja2-3.1.5-py3-none-any.whl and prismjs-1.29.0.tgz which is vulnerable to CVE-2025-27516 and CVE-2024-53382 This bulletin contains information regarding the vulnerability and its fixture.

Summary IBM Maximo Application Suite uses jinja2-3.1.5-py3-none-any.whl and prismjs-1.29.0.tgz which is vulnerable to CVE-2025-27516 and CVE-2024-53382 This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is ...

CVE-2025-6650

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-435/ 2025-06-25 21:50:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19537 2025-06-26 00:48:09+00:00| seen|...

CVE-2025-6646

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-431/ 2025-06-25 21:50:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19533 2025-06-26 00:33:43+00:00| seen|...

CVE-2025-6640

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-425/ 2025-06-25 21:50:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19527...

SingleStore: IDOR - Scheduled data leak to other accounts By "projectID"

The Insecure Direct Object Reference IDOR vulnerability was discovered in the GetNotebookScheduledPaginatedJobs endpoint on backend.singlestore.com. The API failed to verify the requestor's permission to access the specified project, allowing an authenticated user to access scheduled job...

CVE-2025-52920

Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...

Mageia: Security Advisory (MGASA-2025-0191)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-26816 · Brother Industries +4 · Ads-1250W +651

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to the Web Services feature HTTP TCP port 80 can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target...

Fedora: Security Advisory (FEDORA-2025-8a18a5a077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-23265

creationtimestamp| type| source ---|---|--- 2025-06-24 15:47:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19366 2025-06-25 16:09:46+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lsgyq5yoqk2j...

CVE-2025-27828

creationtimestamp| type| source ---|---|--- 2025-06-24 14:46:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19344 2025-06-24 16:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsekbeanrx2m...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-32978

creationtimestamp| type| source ---|---|--- 2025-06-24 03:57:18+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd7dkbzd426 2025-06-24 04:03:06+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736351479215338 2025-06-24 05:50:06+00:00| seen|...

CVE-2025-52566 llama.cpp tokenizer signed vs. unsigned heap overflow

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-34035

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:28+00:00| published-proof-of-concept| Telegram/NM29ZOqpmG-Y64LGkIifGuVrcqzQc0JYrAesLRC81UHf4 2025-06-24 02:47:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19294 2025-06-24 04:56:16+00:00| seen|...

PHPGurukul Online DJ Booking Management System has a security vulnerability

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul Inc. A security vulnerability exists in version 2.0 of the PHPGurukul Online DJ Booking Management System due to an insecure direct object reference in odms/request-details.php...

PT-2025-26769 · Aleris · Kaleris Navis N4 Ulc

Name of the Vulnerable Software and Affected Versions: Kaleris NAVIS N4 ULC affected versions not specified Description: The issue concerns an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server...

CVE-2025-6581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-customer.php. The manipulation of the argument name/email/mobilenum/gender/details/dob/marriagedate leads to sql...