5 Threats That Reshaped Web Security This Year [2025]

As 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving injection techniques, and supply chain compromises affecting hundreds of thousands of websites forced a fundamental...

EUVD-2025-84802

Malicious code in maman-rangi45-miaww npm...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990639 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlanroutev6outbound helper Inspired by syzbot reports using a stack of multiple...

OESA-2025-2371 llama.cpp security update

Security Fixes: llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size compariso...

EUVD-2025-7449

Malicious code in bioql PyPI...

EUVD-2025-1636

Malicious code in bioql PyPI...

CVE-2024-39289

creationtimestamp| type| source ---|---|--- 2025-07-17 19:23:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870205065116436...

CVE-2025-50079

...

CVE-2025-7076

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access controls. The attack needs to be initiat...

CVE-2025-6751

creationtimestamp| type| source ---|---|--- 2025-06-27 03:51:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19663 2025-06-27 07:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsl4cszoxe2s 2025-06-30 20:26:56+00:00| seen|...

CVE-2025-5289

creationtimestamp| type| source ---|---|--- 2025-06-21 11:43:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19113 2025-06-21 13:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4oyhx4fm2i...

BELL-CVE-2025-38068

Bulletin has no description...

CVE-2025-6093

A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1i2chalwrite of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrate1hal.c. The manipulation of the argument...

Debian: Security Advisory (DSA-5927-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2025:3018

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14537...

CVE-2025-27746

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

BELL-CVE-2025-21825

Bulletin has no description...

CVE-2025-0817

creationtimestamp| type| source ---|---|--- 2025-02-18 11:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lih542wvfg27 2025-02-18 12:38:01+00:00| seen| https://t.me/cvedetector/18313 2025-02-18 13:00:39+00:00| seen|...

CVE-2024-56026

creationtimestamp| type| source ---|---|--- 2025-01-02 12:20:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2s3i4es25 2025-01-02 19:23:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113760391053875471...

CVE-2024-9989

creationtimestamp| type| source ---|---|--- 2024-10-29 18:57:39+00:00| seen| https://t.me/cvedetector/9346 2025-01-05 22:10:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9989.yaml 2026-04-08 21:40:09+00:00| seen|...