CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

CVE-2023-47298

creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19205 2025-06-23 16:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbyrqhj5u2p...

CVE-2025-6512

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-27387

creationtimestamp| type| source ---|---|--- 2025-06-23 09:44:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19187 2025-06-23 10:03:28+00:00| published-proof-of-concept| Telegram/GDm1H2yMsUWi0B2hrQwSaQ-hj0W8UNWimUdimX7TtAl1LE 2025-06-23 12:24:07+00:00| seen|...

CVE-2025-6510

creationtimestamp| type| source ---|---|--- 2025-06-23 09:22:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114731943756716970 2025-06-23 17:31:42+00:00| published-proof-of-concept| Telegram/nPEUyhGnsP59voT2ahckIV2qfXLOATZFAOqcmcKzo8MVrGY 2025-06-23 19:24:24+00:00| seen|...

CVE-2025-6499

creationtimestamp| type| source ---|---|--- 2025-06-23 02:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19176 2025-06-23 03:53:02+00:00| seen| https://bsky.app/profile/potato.software/post/3lsaomznbf724 2025-06-23 06:18:47+00:00| seen|...

CVE-2025-6487

creationtimestamp| type| source ---|---|--- 2025-06-22 18:44:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19172 2025-06-22 19:00:58+00:00| published-proof-of-concept| Telegram/nHwRDF2pACkOFCESw7WBf09x7jYFFFCQYf7GTcksxOZY6eE 2025-06-22 19:24:13+00:00| seen|...

CVE-2025-52923

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command...

CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be...

CVE-2025-31205

creationtimestamp| type| source ---|---|--- 2025-06-21 21:38:43+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls5jaosfek2x...

CVE-2025-6413

creationtimestamp| type| source ---|---|--- 2025-06-21 18:46:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19124 2025-06-21 19:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5dnekmqi2a...

CVE-2025-6409

creationtimestamp| type| source ---|---|--- 2025-06-21 16:31:48+00:00| published-proof-of-concept| Telegram/N5xb8aPdHeqYoGeqIlWHSNd3ovkwt-hXN2mjrRLjnqW7ols 2025-06-21 16:44:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19120 2025-06-21 20:18:25+00:00| seen|...

CVE-2025-3629

creationtimestamp| type| source ---|---|--- 2025-06-21 13:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pkespq42i...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: step-issuer, tkn-fips, karma, step-ca, sftpgo, gitness, dapr-fips, rclone, step, kyverno-policy-reporter-ui-fips, buf, rclone-fips, caddy, caddy-fips, tkn, kyverno-policy-reporter-ui, cloudflared, telegraf, step-ca-fips, step-issuer-fips, step-fips, dapr, gogatekeepe...

CVE-2025-5143

creationtimestamp| type| source ---|---|--- 2025-06-21 07:42:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19110 2025-06-21 09:48:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4bky4aif2v...

CVE-2025-52557

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19099 2025-06-21 05:53:26+00:00| seen|...

CVE-2025-6394

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19101 2025-06-21 06:24:51+00:00| seen|...

CVE-2025-52916

Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration last five digits...

Haptic-Based User Authentication for Tele-robotic System

Tele-operated robots rely on real-time user behavior mapping for remote tasks, but ensuring secure authentication remains a challenge. Traditional methods, such as passwords and static biometrics, are vulnerable to spoofing and replay attacks, particularly in high-stakes, continuous interactions...

CVE-2025-34029

creationtimestamp| type| source ---|---|--- 2025-06-20 21:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zqqwvu625 2025-06-21 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nwbs527 2025-06-30 20:27:00+00:00| seen|...