CVE-2025-12685

creationtimestamp| type| source ---|---|--- 2026-01-02 07:47:19+00:00| seen| https://gist.github.com/Darkcrai86/7cd2378762c8574319d5764a8da2e3e8 2026-01-02 07:56:10+00:00| seen| https://gist.github.com/Darkcrai86/99843a0587af6340ac3dfea60d398547 2026-01-02 18:53:57+00:00| seen|...

CVE-2025-14998

creationtimestamp| type| source ---|---|--- 2026-01-02 03:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbfy42vpmw2u 2026-01-02 03:49:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbfygjrrqv2p 2026-01-02 07:47:35+00:00| seen|...

PT-2026-21768

Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.1 Description Caddy, an extensible server platform that uses TLS by default, has an issue where mTLS client certificate authentication can silently fail open under certain conditions. Specifically, if a CA...

CVE-2025-62116

creationtimestamp| type| source ---|---|--- 2025-12-31 17:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcfvlnq5r2m...

CVE-2025-59129

creationtimestamp| type| source ---|---|--- 2025-12-30 17:25:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mb7ungieyo2e 2025-12-30 18:23:48+00:00| seen| https://gist.github.com/Darkcrai86/884580b3dd36d2c1b6007d39306ff188 2025-12-30 18:33:11+00:00| seen|...

EUVD-2025-205821

Malicious code in nbugs-video npm...

Malicious Package

Overview bigmathex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2025-69016

creationtimestamp| type| source ---|---|--- 2025-12-30 13:35:32+00:00| seen| https://gist.github.com/Darkcrai86/9bcc27e97a7701b6cd9942a605d8a026...

CVE-2025-14280

creationtimestamp| type| source ---|---|--- 2025-12-29 21:01:11+00:00| seen| https://gist.github.com/Darkcrai86/39c00cb5ff2fd8affa2ecb8b7f90a438...

CVE-2025-71322

creationtimestamp| type| source ---|---|--- 2025-12-29 15:26:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hgrh-qx5j-jfwx 2026-06-17 18:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moivz5yac32i...

Critical 0day flaw Exposes 70k XSpeeder Devices as Vendor Ignores Alert

Researchers reveal CVE-2025-54322, a critical unpatched flaw in XSpeeder networking gear found by AI agents. 70,000 industrial and branch devices are exposed...

CVE-2025-15182

creationtimestamp| type| source ---|---|--- 2025-12-29 12:13:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sq7ubr72e...

CVE-2025-2307

creationtimestamp| type| source ---|---|--- 2025-12-25 23:26:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwi5dmfj2f 2025-12-25 23:28:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwkqyuyf22...

CVE-2025-15084

creationtimestamp| type| source ---|---|--- 2025-12-25 22:27:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3matt64zryf2e 2025-12-26 13:37:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115786136214380178...

EUVD-2025-205380

Malicious code in aiogram-sever-patch PyPI...

CVE-2025-15075

creationtimestamp| type| source ---|---|--- 2025-12-25 07:16:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3masabqone72x...

CVE-2025-68532

creationtimestamp| type| source ---|---|--- 2025-12-24 13:44:50+00:00| seen| https://gist.github.com/Darkcrai86/7d8d18a8290f827548c14f8abe24cbb3...

CVE-2025-68614

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.12.0, the Alert Rule API is vulnerable to stored cross-site scripting. Alert rules can be created or updated via LibreNMS API. The alert rule name is not properly sanitized, and can be used to inject...

Malicious Package

Overview mw-proto-ts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2025-204770

LibreNMS Alert Rule API Cross-Site Scripting Vulnerability...