CVE-2025-49825 Teleport allows remote authentication bypass

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch...

CVE-2025-49415

creationtimestamp| type| source ---|---|--- 2025-06-17 16:18:10+00:00| seen| Telegram/-G7yge5OOPwalQgUT4aKwTAwYlFDeFB7c6hZGGGT8IukU 2026-01-14 16:59:00+00:00| seen| https://projectzero.google/2026/01/pixel-0-click-part-1.html 2026-01-15 19:23:01+00:00| seen|...

CVE-2025-6173

creationtimestamp| type| source ---|---|--- 2025-06-17 07:36:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18570 2026-03-05 16:56:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116177617943178709...

Meta Starts Showing Ads on WhatsApp After 6-Year Delay From 2018 Announcement

Meta Platforms on Monday announced that it's bringing advertising to WhatsApp, but emphasized that the ads are "built with privacy in mind." The ads are expected to be displayed on the Updates tab through its Stories-like Status feature, which allows ephemeral sharing of photos, videos, voice...

PT-2025-33802

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Wi-Fi driver for rtl818x devices. Specifically, the issue involves the order of operations during the rtl8187 stop function. Failing to kill URBs US...

Restaurant Table Booking System check-status.php file cross-site scripting vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter searchdata in the file /check-status.php,...

CVE-2009-2631

creationtimestamp| type| source ---|---|--- 2025-06-16 21:38:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18545...

GHSA-MRFF-Q8QJ-XVG8

creationtimestamp| type| source ---|---|--- 2025-06-16 17:37:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18476...

CVE-2025-4565

creationtimestamp| type| source ---|---|--- 2025-06-16 16:36:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18472 2025-06-16 19:07:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694608316188948 2025-09-03 00:23:02+00:00| seen|...

CVE-2025-6129

creationtimestamp| type| source ---|---|--- 2025-06-16 16:27:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693979502813612 2025-06-16 16:33:33+00:00| seen| Telegram/oLQjAXwI1pcf9b6pBxZMz6ST3ZRfB0R6VH0O2pbpfBI60 2025-06-16 16:36:03+00:00| published-proof-of-concept|...

CVE-2025-49795

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18463 2025-06-16 16:24:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693966654084445 2025-06-16 16:33:33+00:00| seen|...

CVE-2025-6119

creationtimestamp| type| source ---|---|--- 2025-06-16 11:40:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18443 2025-12-14 16:30:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115718868837469265...

CVE-2025-4748

creationtimestamp| type| source ---|---|--- 2025-06-16 11:39:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18442 2025-06-16 13:12:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693212327975159 2025-06-16 15:30:31+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: nfsd: The flag SCSTATUSFREEABLE is now allowed when searching via nfs4lookupstateid. The pynfs DELEG8 test fails when run against nfsd. It acquires a delegation and then waits for the lease time out. It then attempts to use the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: Do not free the command immediately Do not release the command prematurely. Wait for the status completion of the sense status. The command can then be released. Otherwise, we will perform a double-release of t...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Prevent copying of nlink with a value of 0 from the disk inode. syzbot reported a deadlock in diFree. 1 When calling “ioctl$LOOPSETSTATUS64”, the offset value passed in is 4, which does not match the mounted loop device...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: It is now possible for exp to not be removed during the call to nfctfindexpectation. Currently, when nfconntrackin calls nfctfindexpectation, exp is removed from the hash table. However, in some scenarios, we expect ex...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: OpenVSwitch: fixed the issue where locking occurred when trying to unregister a netdev with a carrier. The commit in the “fixes” tag attempted to fix this issue through the following sequence of calls: dooutput → ovsvportsend →...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status as a bitmask carrying the received sub-options, with additional information carried in several bitfields for each suboption. Zeroing the bitma...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fixed a double-free in the error path. If the uvcstatusinit function fails to allocate the inturb variable, it will free the dev-status pointer without resetting it to NULL. This causes the kfree call in...