CVE-2025-6434

creationtimestamp| type| source ---|---|--- 2025-06-24 16:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsekkcoiaq2o 2025-06-25 14:51:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19459...

CVE-2025-50699

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19380 2025-06-24 20:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsevo5e3n72r...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...

CVE-2025-6570

creationtimestamp| type| source ---|---|--- 2025-06-24 15:47:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19364 2025-06-24 20:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewa26a652k...

CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR...

CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR...

CVE-2025-49851

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05 2025-06-24 19:47:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19390 2025-06-25 01:34:53+00:00| seen|...

CVE-2025-52566

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-52566

creationtimestamp| type| source ---|---|--- 2025-06-24 03:48:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19297 2025-06-24 04:32:30+00:00| published-proof-of-concept| Telegram/xYRYp9RnMrs6asvPZWHHQ0msOulfM9P8474meOJ4G31k98 2025-06-24 05:43:11+00:00| seen|...

CVE-2025-52570

CVE-2025-52570 affects the Letmein port-knock implementation. Before version 10.2.1, the connection limiter is implemented incorrectly, allowing an arbitrary number of simultaneous incoming connections (TCP, UDP, and Unix socket) for the services letmeind and letmeinfwd. The num-connections optio...

CVE-2025-34041

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19278 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:26+00:00| seen|...

CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...

CVE-2025-6534

creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19275 2025-06-24 04:23:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdarud6xo25...

CVE-2025-6531

creationtimestamp| type| source ---|---|--- 2025-06-23 23:48:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19272 2025-06-24 04:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdab5cygs2a...

CVE-2025-6526

creationtimestamp| type| source ---|---|--- 2025-06-23 22:47:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19271 2025-06-24 00:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscsmila6q2p...

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

CVE-2025-2828 SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

A Server-Side Request Forgery SSRF vulnerability exists in the RequestsToolkit component of the langchain-community package specifically, langchaincommunity.agenttoolkits.openapi.toolkit.RequestsToolkit in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does n...

CVE-2025-6545

creationtimestamp| type| source ---|---|--- 2025-06-23 18:45:09+00:00| published-proof-of-concept| https://github.com/browserify/pbkdf2/security/advisories/GHSA-h7cp-r72f-jxh6 2025-06-23 20:01:16+00:00| published-proof-of-concept| Telegram/1psvC7CezRzDdQQZmPDn29p4dA-tBW5Fsx58qYiO8Q7Mk 2025-06-23...