Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to loss of confidentiality [CVE-2025-6545] [CVE-2025-6547]

Summary Node.js module pbkdf2 is used by IBM App Connect Enterprise Certified Container when accessing BAR files stored in COS S3 storage. IBM App Connect Enterprise Certified Container Dashboard operands that access BAR files stored in COS S3 storage are vulnerable to loss of confidentiality. Th...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)

Summary IBM App Connect Enterprise runtime, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to Remote Code Execution RCE and improper preservation of permissions due to jsonpath-plus & snowflake-sdk. Vulnerabilit...

CVE-2025-36034

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19613 2025-06-26 21:04:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjznilmpd2r...

CVE-2025-6699

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19612 2025-06-26 21:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsk2idv3cb2v...

CVE-2025-52887

creationtimestamp| type| source ---|---|--- 2025-06-26 14:52:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19610 2025-06-26 19:09:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjtasjsuw2u...

CVE-2025-6677

creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19595 2025-06-26 18:29:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjqzpbnul2i...

CVE-2025-52900

creationtimestamp| type| source ---|---|--- 2025-06-26 12:08:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jj2r-455p-5gvf 2025-06-26 14:51:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19606 2025-06-26...

CVE-2025-3771

creationtimestamp| type| source ---|---|--- 2025-06-26 11:51:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19587 2025-06-26 12:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5qbg5lc2a...

CVE-2025-52902

creationtimestamp| type| source ---|---|--- 2025-06-26 11:15:58+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4wx8-5gm2-2j97 2025-06-26 14:51:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19609 2025-06-26...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities in IBM Java SDK ( CVE-2025-21587,CVE-2025-30698 & CVE-2025-4447)

Summary There are multiple vulnerabilities in IBM Java SDK, Java Technology Edition used by IBM App Connect Enterprise and IBM Integration Bus for z/OS . Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allo...

CVE-2025-37101

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19577 2025-06-26 07:24:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiltljqjv2a 2025-06-26 12:29:08+00:00| seen|...

CVE-2025-5846

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19576 2025-06-26 10:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsixexaxej2v...

CVE-2025-5315

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19575 2025-06-26 10:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiwt23xkc2p...

CVE-2025-1754

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19572 2025-06-26 10:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiw3om6z325...

CVE-2025-5588

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19564 2025-06-26 08:29:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiphw7s6v2i...

CVE-2025-5564

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19553 2025-06-26 08:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipquolym2r...

CVE-2025-5559

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19550 2025-06-26 08:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiqcrinvb2r...

PT-2025-27002 · Github · Octo-Sts

Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...

Citrix Workspace App for Windows Privilege Escalation (CTX694718)

The version of Citrix Workspace installed on the remote host is affected by a privilege escalation vulnerability as referenced in the CTX694718 advisory. - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows CVE-2025-4879 Note that...

CVE-2025-6661

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...