Multi-Use LLM Watermarking and the False Detection Problem

Digital watermarking is a promising solution for mitigating some of the risks arising from the misuse of automatically generated text. These approaches either embed non-specific watermarks to allow for the detection of any text generated by a particular sampler, or embed specific keys that allow...

CVE-2025-44952

A missing length check in ogspfcpsubnetadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101...

CVE-2025-44951

A missing length check in ogspfcpdevadd function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dev field with a value with length greater than 32...

CVE-2024-54458

creationtimestamp| type| source ---|---|--- 2025-06-17 21:38:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrtheiu25s2v 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-07-28 16:16:02+00:00| seen|...

CVE-2025-49843

The CVE-2025-49843 issue affects conda-smithy prior to version 3.47.1, where the travis_headers function creates files with permissions exceeding 0o600, potentially allowing read/write access beyond the intended user. This weakens least-privilege protections and could let an attacker access confi...

CVE-2025-49214

CVE-2025-49214 concerns Trend Micro Endpoint Encryption PolicyServer with an insecure deserialization flaw that could enable post-auth remote code execution. Affected component/behavior: deserialization function in PolicyServer; root cause described as insecure deserialization. Impact: high acros...

CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

CVE-2025-34510

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18657 2025-06-17 19:52:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114700449431770143 2025-06-17 21:41:41+00:00| seen|...

CVE-2025-49863

creationtimestamp| type| source ---|---|--- 2025-06-17 18:08:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt3ngymvn2r 2025-06-18 17:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18797...

CVE-2025-49868

creationtimestamp| type| source ---|---|--- 2025-06-17 17:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt2ovby2r2k 2025-06-20 13:43:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18948...

CVE-2025-49259

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-47452

Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR wpvr allows Upload a Web Shell to a Web Server.This issue affects WP VR: from n/a through = 8.5.26...

CVE-2025-6199

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the...

CVE-2025-3880

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18578 2025-06-17 15:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrst574fmt2k...

CVE-2025-6162

creationtimestamp| type| source ---|---|--- 2025-06-17 05:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18566 2025-06-17 06:02:00+00:00| published-proof-of-concept| Telegram/iU4ppXSD7ZvfAAYF9ke0MI2-YhaidmuvbOqcw99nNEFXY 2025-06-17 07:22:58+00:00| seen|...

CVE-2025-6155 PHPGurukul Hostel Management System login-hm.inc.php sql injection

A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2025-6143

CVE-2025-6143 affects TOTOLINK EX1200T (version 4.1.2cu.5232_B20210713). The vulnerability is a buffer overflow in the /boafrm/formNtp HTTP POST Request Handler when the submit-url argument is manipulated. This can be triggered remotely and, according to multiple sources, the exploit is public. R...

CVE-2025-32800

creationtimestamp| type| source ---|---|--- 2025-06-16 21:31:33+00:00| seen| Telegram/KLejpjD5UEH6hnx5d7FQ9Ch0fmQr9r8Zh3VRBo7F-IhlZCI 2025-06-16 21:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18546 2025-06-16 23:40:43+00:00| seen|...

CVE-2025-49134

Weblate (localization tool) exposed user IPs via audit log email notifications prior to version 5.12; IPs could be harvested by third‑party servers (SMTP relays, spam filters). The issue is resolved by patching in Weblate 5.12 (5.12.1 recommended).