PT-2025-25652 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: The issue allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix...

Unspecified Vulnerability in Tenda TDSEE App

Tenda TDSEE App is an application from Tenda China for managing Tenda brand camera products. A security vulnerability exists in the Tenda TDSEE App that can be exploited by attackers to cause excessive authentication attempts...

CVE-2025-6145

creationtimestamp| type| source ---|---|--- 2025-06-16 23:33:10+00:00| published-proof-of-concept| Telegram/gKGto3J9ZB8GJQGsyZa-VAheuPEP8fY1LtXcBqVk55gIY 2025-06-16 23:40:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18554 2025-06-17 01:13:41+00:00| seen|...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition due to Node.js module snowflake ( CVE-2025-46328 )

Summary IBM App Connect Enterprise Discovery Connectors is vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to Node.js module snowflake Vulnerability Details CVEID:CVE-2025-46328 DESCRIPTION: snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10...

CVE-2025-6131

creationtimestamp| type| source ---|---|--- 2025-06-16 17:37:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18484 2025-06-16 19:49:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqqtfoo2h25...

CVE-2025-6125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18457 2025-06-16 15:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqcrk6kjp25...

CVE-2025-6114

creationtimestamp| type| source ---|---|--- 2025-06-16 09:32:44+00:00| seen| Telegram/LkeoSpPVLo2SQbUaYktcpIv-BNCeaUg0ZAIrpwJQlcqbnWk 2025-06-16 09:37:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18430 2025-06-16 11:29:25+00:00| seen|...

CVE-2025-6113

creationtimestamp| type| source ---|---|--- 2025-06-16 08:37:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18425 2025-06-16 09:32:44+00:00| seen| Telegram/LkeoSpPVLo2SQbUaYktcpIv-BNCeaUg0ZAIrpwJQlcqbnWk 2025-06-16 11:14:24+00:00| seen|...

CVE-2025-6169

creationtimestamp| type| source ---|---|--- 2025-06-16 06:36:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18417 2025-06-16 07:02:00+00:00| published-proof-of-concept| Telegram/OAeohy5AQ707fr3sCIlt36l66cpCglN4j8TaDzNZuu7o0 2025-06-16 09:56:56+00:00| seen|...

CVE-2025-6096

creationtimestamp| type| source ---|---|--- 2025-06-16 01:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrotcbt5fn23 2025-06-16 16:35:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18466...

TencentOS Server 3: perl-App-cpanminus:1.7044 (TSSA-2024:1108)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1108 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Intera InHire 代码问题漏洞

Intera InHire is a mobile application from Intera. A code issue vulnerability exists in Intera InHire 20250530 and prior versions, which stems from an incorrect manipulation of parameter 29chcotoo9 resulting in a server-side request forgery...

CVE-2025-50148

creationtimestamp| type| source ---|---|--- 2025-06-14 07:21:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkg2v7mwt2p...

GHSA-JP4X-W9CJ-97Q7 XWiki allows remote code execution through preview of XClass changes in AWM editor

Impact Any XWiki user with edit right on at least one App Within Minutes application the default for all users XWiki can obtain programming right/perform remote code execution by editing the application. The detailed reproduction steps can be found in the original bug report. Patches This...

XWiki allows remote code execution through preview of XClass changes in AWM editor

Impact Any XWiki user with edit right on at least one App Within Minutes application the default for all users XWiki can obtain programming right/perform remote code execution by editing the application. The detailed reproduction steps can be found in the original bug report. Patches This...

CVE-2025-48916

creationtimestamp| type| source ---|---|--- 2025-06-13 17:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriz2e7wht2r 2025-06-13 19:03:31+00:00| seen| Telegram/4Ga2KnPxVC8teo9C6hWW8v7cz1iZaC5NGvXAx1RBKflQoQ...

CVE-2025-49586

XWiki is affected by CVE-2025-49586, a remote code execution (RCE) vulnerability in which any user with edit rights on at least one App Within Minutes application can obtain programming rights and execute code by editing the application. The flaw is fixed in XWiki releases 17.0.0, 16.4.7, and 16....

CVE-2025-48918

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18320 2025-06-13 17:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriyrfrh3l2u 2025-06-13 19:03:31+00:00| seen|...

CVE-2025-48919

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18318 2025-06-13 17:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrixc4vcwt25...

CVE-2025-6052

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18311 2025-06-13 17:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lriyihctbk2i 2025-06-30 19:39:05+00:00| seen|...