CVE-2025-52483

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19474 2025-06-25 17:05:44+00:00| seen| https://bsky.app/profile/potato.software/post/3lsh3udh2dr2x...

CVE-2025-52479

The CVE-2025-52479 issue affects URIs.jl (before v1.6.0) and HTTP.jl (before v1.10.17), enabling construction of URIs containing CR/LF characters and potentially enabling CRLF injection. The vulnerability is described in OSV-JLSEC-2025-1 and corroborated by Red Hat and CVE sources: using vulnerab...

CVE-2025-6610

creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19470 2025-06-25 16:41:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh2jg3egg2r...

CVE-2025-49135

CVAT (open source CV annotation tool) versions 2.2.0–2.39.0 have a missing validation during the import of project/task backups, where the filename in the query parameter is not verified to refer to a TUS-uploaded file owned by the same user. An account with a user role who knows other users’ fil...

CVE-2025-6607

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19460 2025-06-25 16:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzs2yumr2q...

CVE-2025-6609

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19444 2025-06-25 17:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh3n7wl2g2q...

CVE-2025-6431

When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. This bug only affects...

CVE-2025-6603

creationtimestamp| type| source ---|---|--- 2025-06-25 10:49:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19434 2025-06-25 11:37:47+00:00| seen| https://bsky.app/profile/potato.software/post/3lsgjjvqjzz2x 2025-06-25 14:29:31+00:00| seen|...

CVE-2025-52938

Out-of-bounds Read vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associated with program files lparser.C. This issue affects NotepadNext: through v0.11. The singlevar in lparser.c lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read th...

CVE-2025-6640

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-425/ 2025-06-25 21:50:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19527...

CVE-2025-6661

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-446/ 2025-06-26 00:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshu4updm72u...

CGA-P899-8W4F-7VCH

Bulletin has no description...

D-Link Device Detection (SNMP)

SNMP based detection of D-Link devices. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.171560";...

CVE-2025-6582

creationtimestamp| type| source ---|---|--- 2025-06-24 23:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19412 2025-06-25 02:13:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfjzm3ivi2u...

CVE-2025-45878

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dnqjg22...

CVE-2025-52883

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19398 2025-06-24 22:39:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5zvtylg2a...

CVE-2025-52884

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19397 2025-06-24 22:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4x7qzc72m...

CVE-2025-6556

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19395 2025-06-24 22:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf6cubai72k 2025-06-25 04:59:07+00:00| seen|...

CVE-2025-52880 Komga Vulnerable to Arbitrary Code Execution via Crafted EPUB File

Komga is a media server for comics, mangas, BDs, magazines and eBooks. A Cross-Site Scripting XSS vulnerability has been discovered in versions 1.8.0 through 1.21.3 when serving EPUB resources, either directly from the API, or when reading using the epub reader. The vulnerability lets an attacker...

CVE-2025-52566

A flaw was found in the tokenizer component of llama.cpp. This vulnerability allows heap memory corruption via carefully crafted text input during tokenization, due to a signed vs. unsigned integer overflow in the llamavocab::tokenize function. Mitigation Mitigation for this issue is either not...