CVE-2025-49989 WordPress App Builder plugin <= 5.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through = 5.5.6...

CVE-2025-49989 WordPress App Builder plugin <= 5.5.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in App Cheap App Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects App Builder: from n/a through 5.5.3...

CVE-2025-6337

creationtimestamp| type| source ---|---|--- 2025-06-20 13:01:28+00:00| published-proof-of-concept| Telegram/bCs9TD5nWLoKl9NBv7zZ30vDhWk6X56CF9BvUV6HrirmYw 2025-06-20 13:38:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls25xh5zar2k 2025-06-23 20:47:26+00:00|...

MAL-2025-5198 Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-6318

creationtimestamp| type| source ---|---|--- 2025-06-20 07:44:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18910 2025-06-20 09:02:03+00:00| published-proof-of-concept| Telegram/rPH5h3FNLTWLLOli363EyEFrBKEOUgqhzP2V7bQFlK5dAc 2025-06-20 10:21:30+00:00| seen|...

CVE-2025-6310

creationtimestamp| type| source ---|---|--- 2025-06-20 05:31:23+00:00| published-proof-of-concept| Telegram/RCziIp2TL0t2b-zyhFYwscwIJp40Q5gWdwvBAm2lFwgg 2025-06-20 05:43:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18906 2025-06-20 08:12:43+00:00| seen|...

CVE-2025-6306

creationtimestamp| type| source ---|---|--- 2025-06-20 04:32:08+00:00| published-proof-of-concept| Telegram/-mtAxQJOdz-o0G4wjO--3Y9pj8P3DYCKzD3tpLNxcduUGA 2025-06-20 04:43:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18904 2025-06-20 08:07:43+00:00| seen|...

CVE-2025-6301

creationtimestamp| type| source ---|---|--- 2025-06-20 03:43:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18903 2025-06-20 03:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz4wiu3fe2v...

CVE-2025-6305

creationtimestamp| type| source ---|---|--- 2025-06-20 03:43:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18899 2025-06-20 04:32:08+00:00| published-proof-of-concept| Telegram/-mtAxQJOdz-o0G4wjO--3Y9pj8P3DYCKzD3tpLNxcduUGA 2025-06-20 08:02:42+00:00| seen|...

CVE-2025-6291

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 01:34:01+00:00| published-proof-of-concept| Telegram/IXJXxbbVG4MeEyM6YIgmwid9Y9ikwldvJJVcbF8x9KsQB8A 2025-06-20 03:23:13+00:00| seen|...

CVE-2025-6293

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 04:20:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrz6rnrktw2o...

WordPress plugin App Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress App Builder plugin suffers from an improper access control vulnerability that stems from a lack of authorization, and no detailed vulnerability details are provide...

COROS application 安全漏洞

COROS application is a mobile application that accompanies sports wearable gear from the Chinese company COROS. A security vulnerability exists in COROS application version 3.8.12 and earlier, which stems from unencrypted Bluetooth pairing and bonding, and could lead to a man-in-the-middle attack...

The vulnerability of the Windows Security App antivirus program on the Windows operating system allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows Security App antivirus program in the Windows operating system is related to improper external manipulation of the file name or path. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

PT-2025-26357 · Unknown · Appcheap.Io App Builder

Name of the Vulnerable Software and Affected Versions: App Cheap App Builder versions through 5.5.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For App Cheap App Builder...

VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels

Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...

CVE-2025-6283

creationtimestamp| type| source ---|---|--- 2025-06-19 22:40:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18887 2025-06-19 23:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryq5izohe2o...

CVE-2024-24916

creationtimestamp| type| source ---|---|--- 2025-06-19 13:39:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18845 2025-06-19 17:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lry36qbdkg2r...

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

Threat actors with suspected ties to Russia have been observed taking advantage of a Google account feature called application specific passwords or app passwords as part of a novel social engineering tactic designed to gain access to victims' emails. Details of the highly targeted campaign were...