CVE-2025-6351

creationtimestamp| type| source ---|---|--- 2025-06-20 19:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2snlnjfn2o...

CVE-2025-6361

creationtimestamp| type| source ---|---|--- 2025-06-20 19:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19051 2025-06-20 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls33rftr7o2a...

CVE-2025-6359

creationtimestamp| type| source ---|---|--- 2025-06-20 18:42:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19023 2025-06-20 22:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls337iwynz2o...

CVE-2025-6275

A use-after-free vulnerability has been discovered in WebAssembly's WebAssembly Binary Toolkit wabt, specifically within the GetFuncOffset function. This flaw can be triggered by an attacker with local system access through the manipulation of input provided to this function. Successful...

CVE-2025-50011

CVE-2025-50011 : Stored Cross-Site Scripting in the WordPress plugin “Recipes manager – WPH” (versions up to 1.0.4). Root cause: improper input neutralization during web page generation. Affected: Recipes manager – WPH for WordPress. Impact: stored XSS as described in sources; details on exploit ...

CVE-2025-38040

In the Linux kernel, the following vulnerability has been resolved: serial: mctrlgpio: split disablems into sync and nosync APIs The following splat has been observed on a SAMA5D27 platform using atmelserial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 inatomic: ...

CVE-2025-6340

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18943 2025-06-20 13:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls26jcvyn62u...

CVE-2025-6337

TOTOLINK A3002R/A3002RU (versions 3.0.0-B20230809.1615 through 4.0.0-B20230531.1404) contain a buffer overflow in the HTTP POST Request Handler via the submit-url argument of /boafrm/formTmultiAP. Root cause: insufficient validation of the input length/size of submit-url leading to remote code ex...

CVE-2025-50054

creationtimestamp| type| source ---|---|--- 2025-06-20 07:45:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18914 2025-06-20 09:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzr5pawfm2k 2025-06-22 09:44:12+00:00| seen|...

CVE-2025-6316

creationtimestamp| type| source ---|---|--- 2025-06-20 07:45:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18912 2025-06-20 08:03:11+00:00| published-proof-of-concept| Telegram/gqSaqsnEkaawAvKywG0gW1yPLxl1Qzqy06eWxG6428-oEk 2025-06-20 09:57:06+00:00| seen|...

CVE-2025-6302

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Comment leads to stack-based buffer overflow. It is possible to launch the attack...

PT-2025-26360 · Unknown · Cookie-Script.Com

Name of the Vulnerable Software and Affected Versions: Cookie-Script.com versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Cookie Script, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

CVE-2025-45331

brplot v420.69.1 contains a Null Pointer Dereference NPD vulnerability in the brdagenshandleonce function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels

Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...

CVE-2025-6281

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18882 2025-06-20 00:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqo53l3223...

CVE-2025-47293 PowSyBl Core XML Reader allows XXE and SSRF

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity XXE attack and to a server-side request forgery SSRF attack. This allows an attacker to elevate their...

CVE-2025-6273

A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...

CVE-2025-33117 IBM QRadar SIEM command execution

IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 could allow a privileged user to modify configuration files that would allow the upload of a malicious autoupdate file to execute arbitrary commands...

CVE-2022-50054

A flaw was found in the iavf module in the Linux kernel. A NULL pointer dereference can be triggered due to improper error management, resulting in a denial of service...

CVE-2025-6269

A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5Creconstructcacheentry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the...