CVE-2025-5588

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19564 2025-06-26 08:29:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiphw7s6v2i...

CVE-2025-5564

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19553 2025-06-26 08:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipquolym2r...

CVE-2025-5559

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19550 2025-06-26 08:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiqcrinvb2r...

PT-2025-27002 · Github · Octo-Sts

Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...

Citrix Workspace App for Windows Privilege Escalation (CTX694718)

The version of Citrix Workspace installed on the remote host is affected by a privilege escalation vulnerability as referenced in the CTX694718 advisory. - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows CVE-2025-4879 Note that...

CVE-2025-6661

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-52483

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52483 Registrator.jl Vulnerable to Argument Injection and Command Injection

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52480 Registrator.jl Argument Injection Vulnerability

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the...

CVE-2025-52480

CVE-2025-52480 affects Registrator.jl. If the clone URL from GitHub is malicious (or injected via upstream vulnerabilities), an argument injection in the gettreesha() function can enable remote code execution. Impact is described as a potential RCE; affected versions are prior to 1.9.5. Remediati...

MAL-2025-5379 Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

CVE-2024-51980

creationtimestamp| type| source ---|---|--- 2025-06-25 07:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19424 2025-06-25 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgn5l4xm62i 2025-06-27 19:17:18+00:00| seen| https://t.me/icscert/1204...

Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

MAL-2025-5273 Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

CVE-2025-6651

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-436/ 2025-06-25 21:50:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19538 2025-06-26 01:08:11+00:00| seen|...

[SECURITY] Fedora 42 Update: gotify-desktop-1.3.7-5.fc42

Small Gotify daemon to receive messages and forward them as desktop notificat ions. Read Gotify messages, and forward them as standard desktop notification . Forward message priority. Auto reconnect if server connection is lost and g et missed messages. Automatically download, cache, and show app...

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Azure App Services Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within Azure App Services. The issue results from the exposure of sensitive information...