CVE-2025-52560 Kanboard Password Reset Poisoning via Host Header Injection

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with URLs derived from the unvalidated Host header when the applicationurl configuration is unset default behavior. This allows an attacker to...

CVE-2025-6532

creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19277 2025-06-24 04:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdc343scr23...

CVE-2025-6436

Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 140 and Thunderbird 140...

CVE-2025-6529 70mai M300 Telnet Service default credentials

A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation leads to use of default credentials. The attack needs to be initiated within the local network. The exploit has...

CVE-2025-6528

creationtimestamp| type| source ---|---|--- 2025-06-23 22:47:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19269 2025-06-24 00:28:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsctndcxl72m...

CVE-2025-52558

creationtimestamp| type| source ---|---|--- 2025-06-23 21:31:05+00:00| seen| Telegram/3KuJxnL-u9Q1MXHm7LBK-vISfp2Lp9FGxNigrPHhkXm0g 2025-06-24 00:11:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscspnugwq2p 2025-06-24 17:49:02+00:00| published-proof-of-concept|...

CVE-2025-49574

CVE-2025-49574 affects Quarkus (Java) where data from a duplicated Vert.x context may leak into another transaction due to duplicating a duplicated context. Public details indicate this impacts versions prior to 3.24.1, 3.20.2, and 3.15.6, with patches provided in those versions. Remediation is t...

CVE-2025-6547

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: =3.1.2...

CVE-2025-4563

CVE-2025-4563 describes a vulnerability in the NodeRestriction admission controller where, with the DynamicResourceAllocation feature gate enabled, resource validation is performed on pod status updates but not on pod creation. This can allow a compromised node to create mirror pods that access u...

CVE-2025-6444

creationtimestamp| type| source ---|---|--- 2025-06-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-415/ 2025-06-25 18:51:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19510...

CVE-2025-6445

creationtimestamp| type| source ---|---|--- 2025-06-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-416/ 2025-06-25 18:51:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19512 2025-06-25 21:29:52+00:00| seen|...

CVE-2025-6496

creationtimestamp| type| source ---|---|--- 2025-06-23 02:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsaitzzbol2r 2025-06-23 13:44:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19201...

Hostel Management system SQL Injection Vulnerability

Hostel Management System is a dormitory management system designed specifically for schools or organizations. Hostel Management system suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the studentrollno parameter in the...

CVE-2025-6478

creationtimestamp| type| source ---|---|--- 2025-06-22 13:47:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19161 2025-06-22 18:04:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls7npzrcdy2m...

CVE-2025-6455

CVE-2025-6455 affects the code-projects Online Hotel Reservation System (version 1.0). The vulnerability resides in the file /messageexec.php , where the manipulation of the Name argument leads to an SQL injection . Multiple connected sources (CNVD, CNNVD, Red Hat, PT Security, etc.) describe rem...

SecONNds: Secure Outsourced Neural Network Inference on ImageNet

The widespread adoption of outsourced neural network inference presents significant privacy challenges, as sensitive user data is processed on untrusted remote servers. Secure inference offers a privacy-preserving solution, but existing frameworks suffer from high computational overhead and...

Leakage-Resilient Extractors against Number-On-Forehead Protocols

Given a sequence of $N$ independent sources $\mathbfX1,\mathbfX2,\dots,\mathbfXN\sim\0,1^n$, how many of them must be good i.e., contain some min-entropy in order to extract a uniformly random string? This question was first raised by Chattopadhyay, Goodman, Goyal and Li STOC '20, motivated by...

The Domination and Secure Domination Numbers of Direct Product of Cliques with Paths and Cycles

In this paper, we obtain the exact values of several domination parameters for the direct product of a complete graph with a path or a cycle. Specifically, we determine the domination number, independent domination number, $1,2$-domination number, secure domination number, and 2-domination number...

CVE-2025-38048

In the Linux kernel, the following vulnerability has been resolved: virtioring: Fix data race by tagging eventtriggered as racy for KCSAN syzbot reports a data-race when accessing the eventtriggered, here is the simplified stack when the issue occurred:...

CVE-2025-49978 WordPress JobSearch plugin <= 2.9.0 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobSearch: from n/a through 2.9.0...