Lunary 跨站脚本漏洞

Lunary is a production toolkit for LLMs open sourced by Lunary. A cross-site scripting vulnerability exists in Lunary versions prior to 1.9.24, which stems from uncleaned v1/runs/ingest endpoint inputs, and could lead to a stored cross-site scripting attack...

MongoDB Server 安全漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server versions prior to 6.0.23,...

CVE-2025-29630

creationtimestamp| type| source ---|---|--- 2025-07-04 21:00:04+00:00| published-proof-of-concept| Telegram/OollRHxvoptfGlV2c1gbdC6jSDWMy1y9qQszI5U7KKS9Kqc...

USN-7616-1 logback vulnerabilities

It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-42550 It was...

UBUNTU-CVE-2025-52886

Poppler is a PDF rendering library. Versions prior to 25.06.0 use std::atomicint for reference counting. Because std::atomicint is only 32 bits, it is possible to overflow the reference count and trigger a use-after-free. Version 25.06.0 patches the issue...

CVE-2025-6756

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7CUSTOMFIELDS shortcode in all versions up to, and including, 3.5.21 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

Vulnerabilities fixed in Adobe InDesign Desktop

Adobe has fixed vulnerabilities in InDesign Desktop Specifically for versions ID20.2, ID19.5.3, and earlier. The vulnerabilities include a Heap-based Buffer Overflow, Use After Free, NULL Pointer Dereference, and out-of-bounds read, all of which can lead to arbitrary code execution or disclosure ...

CVE-2025-6863

creationtimestamp| type| source ---|---|--- 2025-06-29 15:57:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19867 2025-06-29 16:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsr55ec5ju2r...

WordPress plugin EZ SQL Reports Shortcode Widget and DB Backup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-53260

creationtimestamp| type| source ---|---|--- 2025-06-27 15:29:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslxgqvc3o2r...

CVE-2025-6748

creationtimestamp| type| source ---|---|--- 2025-06-27 04:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskt3ptwfn2i 2025-06-27 13:50:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19701...

CVE-2025-34042

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19635 2025-06-27 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjz7ngpw2c 2025-06-30 20:27:01+00:00| seen|...

UBUNTU-CVE-2025-6710

MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption. Such inputs can lead to a stack overflow that causes the server to crash which coul...

CVE-2025-6537

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19569 2025-06-26 06:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsijgycmx32i...

CVE-2025-44608

creationtimestamp| type| source ---|---|--- 2025-06-25 17:33:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/41875 2025-06-25 21:00:04+00:00| published-proof-of-concept| Telegram/INbhvu6suw58y9HrUal3GQ-Sx3WcR9t4iYviK9OyeuUsQE...

Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005583 fixes several issues. The following security issues were fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

CVE-2025-6426

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19450 2025-06-25 17:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh5qyk35h23 2026-04-13 17:56:13+00:00| seen|...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...

GHSA-9VJ4-RV7Q-36QJ

creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19301...

CVE-2025-34031

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 02:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19296 2025-06-24 04:26:56+00:00| seen|...