CVE-2025-49989

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through = 5.5.6...

SparkKitty, SparkCat’s little brother: A new Trojan spy found in the App Store and Google Play

Update 25.06.2025: Apple removed the malicious app from the App Store. In January 2025, we uncovered the SparkCat spyware campaign, which was aimed at gaining access to victims' crypto wallets. The threat actor distributed apps containing a malicious SDK/framework. This component would wait for a...

PT-2025-26583 · Xiaomi · Xiaomi Mi Connect Service App

Name of the Vulnerable Software and Affected Versions: Xiaomi Mi Connect Service APP affected versions not specified Description: An unauthorized access issue exists due to flawed validation logic in the Xiaomi Mi Connect Service APP, allowing attackers to gain unauthorized access to devices...

CVE-2025-6490

creationtimestamp| type| source ---|---|--- 2025-06-22 19:46:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19173 2025-06-22 22:04:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsa35kkjrt2r...

CVE-2025-6482

creationtimestamp| type| source ---|---|--- 2025-06-22 15:45:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19165 2025-06-22 16:01:26+00:00| published-proof-of-concept| Telegram/JXdIHA4NW6c606ZHTElBxltbVcdKBOZ3nM5pnGiNcLowVzU 2025-06-22 18:12:12+00:00| seen|...

CVE-2025-6473

creationtimestamp| type| source ---|---|--- 2025-06-22 11:45:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19159 2025-06-22 12:18:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls72gn7wuh2o...

CVE-2025-6470

creationtimestamp| type| source ---|---|--- 2025-06-22 09:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19156 2025-06-22 10:00:59+00:00| published-proof-of-concept| Telegram/Jd45ez6KYq7RYvuZO3WcHJzdDbJx2m9Ss-jlaMAfjYY7w6Y 2025-06-22 12:28:54+00:00| seen|...

CVE-2025-6471

creationtimestamp| type| source ---|---|--- 2025-06-22 09:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19155 2025-06-22 11:02:15+00:00| published-proof-of-concept| Telegram/YeFYh1iVxD7vZ8phK8qYl1Wq64u4XdAoI5ujoIe-890GAg 2025-06-22 12:13:53+00:00| seen|...

CVE-2025-52918

creationtimestamp| type| source ---|---|--- 2025-06-21 23:43:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19136 2025-06-22 02:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5xwocd5w2a 2025-08-07 10:00:00+00:00| seen|...

CVE-2025-6417

creationtimestamp| type| source ---|---|--- 2025-06-21 20:45:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19128 2025-06-21 23:59:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5r46aotd2a 2026-07-22 05:00:05+00:00| seen|...

CVE-2025-6412

creationtimestamp| type| source ---|---|--- 2025-06-21 17:45:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19121 2025-06-21 20:08:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5e7bkamg2i...

CVE-2025-6411

creationtimestamp| type| source ---|---|--- 2025-06-21 17:45:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19122 2025-06-21 20:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5ei7yr222o...

CVE-2025-6407

creationtimestamp| type| source ---|---|--- 2025-06-21 14:46:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19116 2025-06-21 15:32:09+00:00| published-proof-of-concept| Telegram/Assw9VrEEJe4EVrWIRhlcCccZizPVDVnNzwWmu7SwOXbOgE 2025-06-21 17:59:00+00:00| seen|...

CVE-2025-6401

creationtimestamp| type| source ---|---|--- 2025-06-21 06:42:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19108 2025-06-21 09:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4btwkfkt2o...

CVE-2025-52552

creationtimestamp| type| source ---|---|--- 2025-06-21 03:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19098 2025-06-21 06:19:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls3vvomwoo25...

Zero 安全漏洞

Zero is an email application from Zero Open Source. A security vulnerability exists in Zero version 0.8 that stems from improper email cleanup and could lead to session hijacking...

CVE-2025-34030

creationtimestamp| type| source ---|---|--- 2025-06-20 22:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls342ebwgm2r 2025-06-21 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nyp3a2k 2025-08-26 01:12:33+00:00| published-proof-of-concept|...

CVE-2025-6352

creationtimestamp| type| source ---|---|--- 2025-06-20 20:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2twthurc2m 2025-06-23 17:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19243...

Hackers Use Social Engineering to Target Expert on Russian Operations

Citizen Lab and Google uncovered a new, sophisticated cyberattack linked to Russian state actors that exploits App-Specific Passwords, bypassing Multi-Factor Authentication. Discover how to protect yourself from these evolving threats...

CVE-2025-49989

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through = 5.5.6...