CVE-2025-5846

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19576 2025-06-26 10:50:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsixexaxej2v...

CVE-2025-5315

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19575 2025-06-26 10:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiwt23xkc2p...

CVE-2025-1754

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19572 2025-06-26 10:27:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiw3om6z325...

CVE-2025-5588

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19564 2025-06-26 08:29:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiphw7s6v2i...

CVE-2025-5564

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19553 2025-06-26 08:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipquolym2r...

CVE-2025-5559

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19550 2025-06-26 08:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiqcrinvb2r...

PT-2025-27002 · Github · Octo-Sts

Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...

Citrix Workspace App for Windows Privilege Escalation (CTX694718)

The version of Citrix Workspace installed on the remote host is affected by a privilege escalation vulnerability as referenced in the CTX694718 advisory. - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows CVE-2025-4879 Note that...

CVE-2025-6661

PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-52483

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52483 Registrator.jl Vulnerable to Argument Injection and Command Injection

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities a shell script injection can occur within the...

CVE-2025-52480 Registrator.jl Argument Injection Vulnerability

Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious or can be injected using upstream vulnerabilities, an argument injection is possible in the...

CVE-2025-52480

CVE-2025-52480 affects Registrator.jl. If the clone URL from GitHub is malicious (or injected via upstream vulnerabilities), an argument injection in the gettreesha() function can enable remote code execution. Impact is described as a potential RCE; affected versions are prior to 1.9.5. Remediati...

MAL-2025-5379 Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in collab-app (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

CVE-2024-51980

creationtimestamp| type| source ---|---|--- 2025-06-25 07:50:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19424 2025-06-25 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgn5l4xm62i 2025-06-27 19:17:18+00:00| seen| https://t.me/icscert/1204...

Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

MAL-2025-5273 Malicious code in profile-page-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5b881783112f2a7bdb2dbb9d4044a0127e3eecfa9c912d90cb85c22a80aa4fb Any computer that has this package installed or running should be considered...

CVE-2025-6651

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-436/ 2025-06-25 21:50:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19538 2025-06-26 01:08:11+00:00| seen|...