CVE-2025-52480

CVE-2025-52480 affects Registrator.jl. If the clone URL from GitHub is malicious (or injected via upstream vulnerabilities), an argument injection in the gettreesha() function can enable remote code execution. Impact is described as a potential RCE; affected versions are prior to 1.9.5. Remediati...

MAL-2025-5379 Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

CVE-2024-51980

creationtimestamp| type| source ---|---|--- 2025-06-25 07:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19424 2025-06-25 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgn5l4xm62i 2025-06-27 19:17:18+00:00| seen| https://t.me/icscert/1204...

Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

MAL-2025-5273 Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

CVE-2025-6651

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-436/ 2025-06-25 21:50:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19538 2025-06-26 01:08:11+00:00| seen|...

[SECURITY] Fedora 42 Update: gotify-desktop-1.3.7-5.fc42

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Azure App Services Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within Azure App Services. The issue results from the exposure of sensitive information...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52471

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19404 2025-06-25 01:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfgyxmup22a...

CVE-2025-52571

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19403 2025-06-24 21:24:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsezue3amb2k 2026-08-14 16:00:11+00:00| seen| https://t.me/purpsec/812...

CVE-2025-45880

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dpyzc2s...

CVE-2025-6555

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19396 2025-06-24 22:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf54lq3ew2i 2025-06-25 05:12:33+00:00| seen|...

SparkKitty Spyware on App Store and Play Store, Steals Photos for Crypto Data

Kaspersky uncovers SparkKitty, new spyware in Apple App Store & Google Play. Steals photos, targets crypto info, active since early 2024 via malicious apps...

Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

MAL-2025-5477 Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

CVE-2025-4378

Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass. This issue affects ATA-AOF Mobile Application: before 20.06.2025...