CVE-2025-65637

creationtimestamp| type| source ---|---|--- 2025-12-02 15:55:50+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61396 2025-12-18 11:44:11+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mab3xcacgs2t 2026-02-19 13:10:11+00:00| seen|...

CVE-2025-11784

creationtimestamp| type| source ---|---|--- 2025-12-02 14:36:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6z64wltgt2u...

CVE-2025-48631

creationtimestamp| type| source ---|---|--- 2025-12-02 11:03:43+00:00| seen| https://bsky.app/profile/securityrss.bsky.social/post/3m6ysabxve527 2025-12-02 11:23:04+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m6ytc4pph22v 2025-12-02 11:23:05+00:00| seen|...

CVE-2025-13685

creationtimestamp| type| source ---|---|--- 2025-12-02 08:14:07+00:00| seen| https://gist.github.com/Darkcrai86/37c29ab9045201caf2cdb8f06c439323 2025-12-02 10:39:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6yqumcbnb2u...

CVE-2025-40040

creationtimestamp| type| source ---|---|--- 2025-12-02 03:00:06+00:00| published-proof-of-concept| Telegram/YayxELDr7bbgB7UjhDLw2luzrG44OM1tc-dUordibmBL6dY 2026-01-09 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbynkdmqaw2z 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-55129

HackerOne community member Kassem S.kassems94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne...

CVE-2025-13837

When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues...

CVE-2025-65406

A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...

CVE-2025-66305

creationtimestamp| type| source ---|---|--- 2025-12-01 15:52:39+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-m8vh-v6r6-w7p6 2025-12-01 22:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xjcbaijz2n...

CVE-2025-66307

creationtimestamp| type| source ---|---|--- 2025-12-01 15:50:18+00:00| published-proof-of-concept| https://github.com/getgrav/grav/security/advisories/GHSA-q3qx-cp62-f6m7 2025-12-01 23:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6xju6wwv32k...

CVE-2025-55221

creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:56+00:00| seen| https://infosec.place/objects/b07c452b-428c-48af-a490-215c0e255962...

CVE-2025-13737

creationtimestamp| type| source ---|---|--- 2025-12-01 08:05:49+00:00| seen| https://gist.github.com/Darkcrai86/bb2ec488ce5eb9dba9bfe84e12d1d783...

CVE-2025-13706

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1034/...

CVE-2025-65112

creationtimestamp| type| source ---|---|--- 2025-11-29 01:33:55+00:00| seen| https://infosec.exchange/users/offseq/statuses/115630409860080919 2026-07-26 02:00:07+00:00| seen| https://t.me/cyberwarehouse/1005 2026-07-27 00:00:32+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/1005...

GHSA-6GXW-85Q2-Q646 vulnerabilities

Vulnerabilities for packages: chainctl, k9s, cg, zarf...

CVE-2025-64312

creationtimestamp| type| source ---|---|--- 2025-11-28 07:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6odpffgno2x...

CVE-2025-66372

creationtimestamp| type| source ---|---|--- 2025-11-28 07:12:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6odggvxb62s...

CVE-2025-58303

creationtimestamp| type| source ---|---|--- 2025-11-28 05:38:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6o67uwwo72q...

CVE-2025-13338

creationtimestamp| type| source ---|---|--- 2025-11-28 00:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6nn62hi7v2s...

📄 WinRAR 6.22 Malicious ZIP Creation

This Metasploit module exploits a logical flaw in WinRAR versions before 6.23. The vulnerability allows attackers to create specially crafted ZIP archives that, when opened, execute arbitrary code by exploiting the file extraction logic when a user double-clicks on a file within the archive that...