CVE-2025-49214

CVE-2025-49214 concerns Trend Micro Endpoint Encryption PolicyServer with an insecure deserialization flaw that could enable post-auth remote code execution. Affected component/behavior: deserialization function in PolicyServer; root cause described as insecure deserialization. Impact: high acros...

CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

CVE-2025-34510

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18657 2025-06-17 19:52:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114700449431770143 2025-06-17 21:41:41+00:00| seen|...

CVE-2025-49863

creationtimestamp| type| source ---|---|--- 2025-06-17 18:08:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt3ngymvn2r 2025-06-18 17:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18797...

CVE-2025-49868

creationtimestamp| type| source ---|---|--- 2025-06-17 17:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt2ovby2r2k 2025-06-20 13:43:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18948...

CVE-2025-49259

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through = 1.2.10...

CVE-2025-47452

Unrestricted Upload of File with Dangerous Type vulnerability in RexTheme WP VR wpvr allows Upload a Web Shell to a Web Server.This issue affects WP VR: from n/a through = 8.5.26...

CVE-2025-6199

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the...

CVE-2025-3880

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18578 2025-06-17 15:36:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrst574fmt2k...

CVE-2025-6162

creationtimestamp| type| source ---|---|--- 2025-06-17 05:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18566 2025-06-17 06:02:00+00:00| published-proof-of-concept| Telegram/iU4ppXSD7ZvfAAYF9ke0MI2-YhaidmuvbOqcw99nNEFXY 2025-06-17 07:22:58+00:00| seen|...

CVE-2025-6155 PHPGurukul Hostel Management System login-hm.inc.php sql injection

A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2025-6143

CVE-2025-6143 affects TOTOLINK EX1200T (version 4.1.2cu.5232_B20210713). The vulnerability is a buffer overflow in the /boafrm/formNtp HTTP POST Request Handler when the submit-url argument is manipulated. This can be triggered remotely and, according to multiple sources, the exploit is public. R...

CVE-2025-32800

creationtimestamp| type| source ---|---|--- 2025-06-16 21:31:33+00:00| seen| Telegram/KLejpjD5UEH6hnx5d7FQ9Ch0fmQr9r8Zh3VRBo7F-IhlZCI 2025-06-16 21:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18546 2025-06-16 23:40:43+00:00| seen|...

CVE-2025-49134

Weblate (localization tool) exposed user IPs via audit log email notifications prior to version 5.12; IPs could be harvested by third‑party servers (SMTP relays, spam filters). The issue is resolved by patching in Weblate 5.12 (5.12.1 recommended).

CVE-2025-6138

The CVE-2025-6138 entry applies to TOTOLINK T10 (version 4.1.8cu.5207). The vulnerability is in the HTTP POST Request Handler function setWizardCfg, in the file /cgi-bin/cstecgi.cgi, where manipulation of the ssid5g argument causes a buffer overflow. It can be exploited remotely, and the exploit ...

CVE-2025-6128

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18462 2025-06-16 16:27:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693979502813612 2025-06-16 16:33:45+00:00| published-proof-of-concept|...

CVE-2025-4565

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashin...

CVE-2025-48988

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be...

CVE-2025-40916

creationtimestamp| type| source ---|---|--- 2025-06-16 11:39:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18441 2025-06-16 14:32:50+00:00| published-proof-of-concept| Telegram/U8pKzxPaqTMvqzadPo8O1KrDHB3eplOCTxi2a-1fsFdgwBo 2025-06-16 15:08:12+00:00| seen|...