CVE-2025-50179

Summary: CVE-2025-50179 affects Tuleap. The vulnerability is a cross-site request forgery (CSRF) that could allow an attacker to trick victims into changing canned responses. Affected products are Tuleap Community Edition prior to 16.8.99.1749830289 and Tuleap Enterprise Edition prior to 16.9-1. ...

CVE-2025-6433

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This...

CVE-2025-0966

creationtimestamp| type| source ---|---|--- 2025-06-25 03:47:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19416 2025-06-25 06:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfxyz6f3425...

CVE-2025-6650

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-435/ 2025-06-25 21:50:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19537 2025-06-26 00:48:09+00:00| seen|...

CVE-2025-6642

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-427/ 2025-06-25 21:50:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19529...

CVE-2025-6645

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-430/ 2025-06-25 21:50:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19532...

PT-2025-26815 · Brother Industries +2 · Dcp-7090Dw +199

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52882

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19405 2025-06-24 22:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4ntyp4n2u 2025-09-23 15:33:13+00:00| seen|...

CVE-2025-52888

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-50693

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19381 2025-06-24 20:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewiym2qz2p...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...

CVE-2025-6433

creationtimestamp| type| source ---|---|--- 2025-06-24 16:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lseje2ar5n2a 2026-04-13 17:56:26+00:00| seen| Telegram/2lmY4PxMcctl1EtJ4ibPRxsoFbGfFPPqdEaD1gjW88BKsUA...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...

CVE-2025-49151

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-24 20:06:42+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lseviyt4wp2a 2025-06-25 16:45:14+00:00| seen|...

CVE-2025-48890

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19311 2025-06-24 06:28:13+00:00| seen|...

CVE-2025-43879

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19312 2025-06-24 06:13:12+00:00| seen|...

CVE-2025-34038

creationtimestamp| type| source ---|---|--- 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-24 03:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19305 2025-06-25 21:02:24+00:00| seen|...