CVE-2025-49794

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18464 2025-06-16 16:24:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693966654084445 2025-06-16 16:33:33+00:00| seen|...

CVE-2025-6127

PHPGurukul Nipah Virus Testing Management System 1.0 is affected by a cross-site scripting vulnerability in the /search-report.php file via the serachdata parameter. Exploitation is possible remotely and may execute arbitrary script in the victim’s browser, potentially stealing cookies or hijacki...

CVE-2025-6126

creationtimestamp| type| source ---|---|--- 2025-06-16 14:56:23+00:00| seen| https://bsky.app/profile/potato.software/post/3lrqagqinbe2x 2025-06-16 16:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18471 2026-07-22 05:00:05+00:00| seen|...

GHSA-4QQF-9M5C-W2C5 Weblate exposes personal IP address via e-mail

Impact The audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. Patches This issue has been addressed in Weblate 5.12 via https://github.com/WeblateOrg/weblate/pull/15102. References Thanks to...

CVE-2025-49125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18453 2025-06-16 15:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693644318306796 2025-06-16 15:19:46+00:00| seen| https://seclists.org/oss-sec/2025/q2/253...

CVE-2025-6165

creationtimestamp| type| source ---|---|--- 2025-06-16 14:08:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693431824068032 2025-06-17 06:39:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18568 2025-06-17 07:00:59+00:00| published-proof-of-concept|...

CVE-2025-6164

creationtimestamp| type| source ---|---|--- 2025-06-16 13:54:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693378725524836 2025-06-17 05:40:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18564 2025-06-17 07:27:58+00:00| seen|...

CVE-2025-5689

creationtimestamp| type| source ---|---|--- 2025-06-16 12:42:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18446 2025-06-16 19:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694747478598696 2025-06-16 19:47:13+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: The default value for “denominator” is initialized to 1. WHAT & HOW Variables that are used as denominators and may not be assigned to other values should be initialized to a non-zero value to avoid “DIVIDEBYZERO...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs entries past the “end” entry. Once inside ‘ext4xattrinodedecrefall’, we should ignore xattrs entries that are located after the “end” entry. This fixes the following KASAN reported issue:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: block, bfq: fixed the UAF in wakerbfqq after bfqsplitbfqq Our syzkaller report identifies the following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 A size 8 read at address...

CVE-2025-40728

CVE-2025-40728 affects Customer Support System v1.0. SQL injection via the id parameter in /customer_support/manage_user.php enables an authenticated attacker to retrieve, create, update, and delete databases. The advisories describe high impact (confidentiality/integrity/availability) with low a...

CVE-2025-6102

creationtimestamp| type| source ---|---|--- 2025-06-16 04:02:17+00:00| published-proof-of-concept| Telegram/IWgL-7hijIDfZWh3thMsnAy1768rz69pWolDkfnZ1T6kfIs 2025-06-16 04:04:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114691057117107590 2025-06-16 07:27:51+00:00| seen|...

OSV-2025-469 Use-of-uninitialized-value in ndpi_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424653416 Crash type: Use-of-uninitialized-value Crash state: ndpistrdup ndpidetectionprocesspacket fuzzconfig.cpp...

OSV-2025-467 Security exception in java.base/java.lang.StringUTF16.newBytesFor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424839378 Crash type: Security exception Crash state: java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.AbstractStringBuilder.inflate java.base/java.lang.AbstractStringBuilder.append...

PT-2025-25523 · Javahongxi · Whatsmars

Name of the Vulnerable Software and Affected Versions: javahongxi whatsmars version 2021.4.0 Description: A problem has been found that affects the initialize function of the file...

PHPGurukul Nipah virus Testing Management System 代码注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. A cross-site scripting vulnerability exists in the Nipah Virus Testing Management System due to improper handling of the serachdata parameter in the /search-report.php file. An attacker could use this vulnerability to...

PT-2025-27960

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the atmtcp c send function in the Linux kernel, where it accesses skb-data as struct atmtcp hdr after checking if skb-len is 0, but this check is not sufficient...

CGA-PRX6-JQF9-J3W5

Bulletin has no description...

PT-2025-26805 · Git +1 · Xmlsec

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The software is susceptible to a heap-buffer-overflow write issue. The crash state involves the functions xmlParsePubidLiteral, xmlParseExternalID, and xmlParseNotationDecl. Recommendations...