CVE-2025-6431

When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. This bug only affects...

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a pro-Iranian hacktivist group called Cyber Fattah. Cybersecurity company Resecurity said the breach was announced on Telegram on June 22, 2025, in the form of SQL database...

CVE-2025-6603

creationtimestamp| type| source ---|---|--- 2025-06-25 10:49:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19434 2025-06-25 11:37:47+00:00| seen| https://bsky.app/profile/potato.software/post/3lsgjjvqjzz2x 2025-06-25 14:29:31+00:00| seen|...

CVE-2025-52938

Out-of-bounds Read vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associated with program files lparser.C. This issue affects NotepadNext: through v0.11. The singlevar in lparser.c lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read th...

CVE-2025-6640

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-425/ 2025-06-25 21:50:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19527...

CVE-2025-6661

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-446/ 2025-06-26 00:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshu4updm72u...

CGA-P899-8W4F-7VCH

Bulletin has no description...

D-Link Device Detection (SNMP)

SNMP based detection of D-Link devices. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.171560";...

CVE-2025-6582

creationtimestamp| type| source ---|---|--- 2025-06-24 23:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19412 2025-06-25 02:13:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfjzm3ivi2u...

CVE-2025-45878

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dnqjg22...

CVE-2025-52883

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19398 2025-06-24 22:39:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5zvtylg2a...

CVE-2025-52884

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19397 2025-06-24 22:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4x7qzc72m...

CVE-2025-6556

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19395 2025-06-24 22:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf6cubai72k 2025-06-25 04:59:07+00:00| seen|...

CVE-2025-52880 Komga Vulnerable to Arbitrary Code Execution via Crafted EPUB File

Komga is a media server for comics, mangas, BDs, magazines and eBooks. A Cross-Site Scripting XSS vulnerability has been discovered in versions 1.8.0 through 1.21.3 when serving EPUB resources, either directly from the API, or when reading using the epub reader. The vulnerability lets an attacker...

CVE-2025-52566

A flaw was found in the tokenizer component of llama.cpp. This vulnerability allows heap memory corruption via carefully crafted text input during tokenization, due to a signed vs. unsigned integer overflow in the llamavocab::tokenize function. Mitigation Mitigation for this issue is either not...

CVE-2025-6434

creationtimestamp| type| source ---|---|--- 2025-06-24 16:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsekkcoiaq2o 2025-06-25 14:51:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19459...

CVE-2025-50699

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19380 2025-06-24 20:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsevo5e3n72r...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...

CVE-2025-6570

creationtimestamp| type| source ---|---|--- 2025-06-24 15:47:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19364 2025-06-24 20:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewa26a652k...

CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR...