CVE-2025-6499

creationtimestamp| type| source ---|---|--- 2025-06-23 02:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19176 2025-06-23 03:53:02+00:00| seen| https://bsky.app/profile/potato.software/post/3lsaomznbf724 2025-06-23 06:18:47+00:00| seen|...

CVE-2025-6487

creationtimestamp| type| source ---|---|--- 2025-06-22 18:44:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19172 2025-06-22 19:00:58+00:00| published-proof-of-concept| Telegram/nHwRDF2pACkOFCESw7WBf09x7jYFFFCQYf7GTcksxOZY6eE 2025-06-22 19:24:13+00:00| seen|...

CVE-2025-52923

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command...

CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be...

CVE-2025-31205

creationtimestamp| type| source ---|---|--- 2025-06-21 21:38:43+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls5jaosfek2x...

CVE-2025-6413

creationtimestamp| type| source ---|---|--- 2025-06-21 18:46:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19124 2025-06-21 19:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5dnekmqi2a...

CVE-2025-6409

creationtimestamp| type| source ---|---|--- 2025-06-21 16:31:48+00:00| published-proof-of-concept| Telegram/N5xb8aPdHeqYoGeqIlWHSNd3ovkwt-hXN2mjrRLjnqW7ols 2025-06-21 16:44:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19120 2025-06-21 20:18:25+00:00| seen|...

CVE-2025-3629

creationtimestamp| type| source ---|---|--- 2025-06-21 13:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pkespq42i...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: step, step-issuer-fips, gitness, caddy-fips, step-ca-fips, karma, buf, telegraf, tkn, kyverno-policy-reporter-ui-fips, cloudflared, step-issuer, rclone-fips, dapr, step-fips, dapr-fips, sftpgo, kyverno-policy-reporter-ui, step-ca, rclone, tkn-fips, gogatekeeper, cadd...

CVE-2025-5143

creationtimestamp| type| source ---|---|--- 2025-06-21 07:42:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19110 2025-06-21 09:48:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4bky4aif2v...

CVE-2025-6394

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19101 2025-06-21 06:24:51+00:00| seen|...

CVE-2025-52557

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19099 2025-06-21 05:53:26+00:00| seen|...

CVE-2025-52916

Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration last five digits...

Haptic-Based User Authentication for Tele-robotic System

Tele-operated robots rely on real-time user behavior mapping for remote tasks, but ensuring secure authentication remains a challenge. Traditional methods, such as passwords and static biometrics, are vulnerable to spoofing and replay attacks, particularly in high-stakes, continuous interactions...

CVE-2025-34029

creationtimestamp| type| source ---|---|--- 2025-06-20 21:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zqqwvu625 2025-06-21 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nwbs527 2025-06-30 20:27:00+00:00| seen|...

CVE-2025-6351

creationtimestamp| type| source ---|---|--- 2025-06-20 19:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2snlnjfn2o...

CVE-2025-6361

creationtimestamp| type| source ---|---|--- 2025-06-20 19:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19051 2025-06-20 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls33rftr7o2a...

CVE-2025-6359

creationtimestamp| type| source ---|---|--- 2025-06-20 18:42:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19023 2025-06-20 22:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls337iwynz2o...

CVE-2025-6275

A use-after-free vulnerability has been discovered in WebAssembly's WebAssembly Binary Toolkit wabt, specifically within the GetFuncOffset function. This flaw can be triggered by an attacker with local system access through the manipulation of input provided to this function. Successful...

CVE-2025-50011

CVE-2025-50011 : Stored Cross-Site Scripting in the WordPress plugin “Recipes manager – WPH” (versions up to 1.0.4). Root cause: improper input neutralization during web page generation. Affected: Recipes manager – WPH for WordPress. Impact: stored XSS as described in sources; details on exploit ...