CVE-2025-4227

CVE-2025-4227 affects Palo Alto Networks GlobalProtect App (Windows and macOS). The Endpoint Traffic Policy Enforcement feature is vulnerable to improper access control, allowing certain packets to remain unencrypted within the tunnel. A physical-access attacker could inject rogue devices to inte...

CVE-2025-4227 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

CVE-2025-5926

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18252 2025-06-13 05:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrho5kcgi52a...

CVE-2025-5928

creationtimestamp| type| source ---|---|--- 2025-06-13 02:33:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18244 2025-06-13 05:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhouvapcy2m...

CVE-2025-4232

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root...

Palo Alto Networks GlobalProtect app 安全漏洞

Palo Alto Networks GlobalProtect app is a network protection software from Palo Alto Networks, Inc. A security vulnerability exists in the Palo Alto Networks GlobalProtect app that stems from improper access control and could result in certain packets being unencrypted...

The vulnerability of the synchronization application for Qsync Central files relates to the lack of security measures for the SQL query structure, allowing a hacker to execute arbitrary code.

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-47956

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-33069

Improper verification of cryptographic signature in App Control for Business WDAC allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-36573

creationtimestamp| type| source ---|---|--- 2025-06-12 15:33:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18179 2025-06-12 16:32:01+00:00| seen| Telegram/I4uKmFts6nFIYRzRv-JbI8vkc6bsGxku-mm6eaxZ0xVABA 2025-06-12 17:21:56+00:00| seen|...

CVE-2025-6021

creationtimestamp| type| source ---|---|--- 2025-06-12 13:31:11+00:00| seen| Telegram/nlJHE3ha8iCpPS9yvwPWeSQMSDr6y1nEzgyKVlBotA-AE 2025-06-12 13:32:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18163 2025-06-17 08:06:47+00:00| seen|...

CVE-2025-5195

creationtimestamp| type| source ---|---|--- 2025-06-12 11:34:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18162 2025-06-12 13:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrfytgkegm2k...

CVE-2025-49821

creationtimestamp| type| source ---|---|--- 2025-06-12 05:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7mytkx52s...

CVE-2025-6005

creationtimestamp| type| source ---|---|--- 2025-06-12 01:31:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18140 2025-06-12 05:49:01+00:00| published-proof-of-concept| Telegram/XK3qD0jd0FBSOVndpdyXqzyHeXHtVYMdQdJbW1zmL8yqg 2025-06-12 06:02:23+00:00| seen|...

like-girl 安全漏洞

like-girl is a couple logging tool by the individual developer of kiCode111 in China. A security vulnerability exists in like-girl version 5.2.0, which originates from SQL injection due to the incorrect operation of the parameter bz/ipdz in the file /admin/ipAddPost.php...

CVE-2025-3473

creationtimestamp| type| source ---|---|--- 2025-06-11 17:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdxl7x27i2p 2025-06-14 04:33:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18350...

CVE-2025-48447

creationtimestamp| type| source ---|---|--- 2025-06-11 17:30:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdwqeifoo2r 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw...

CVE-2025-48444

creationtimestamp| type| source ---|---|--- 2025-06-11 17:09:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdvk3wrex2s...

CVE-2025-49709

creationtimestamp| type| source ---|---|--- 2025-06-11 15:17:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdpcoeuud2p 2025-06-11 20:15:58+00:00| seen| Telegram/nn4r48fMtsoF4yprR5SnwOJcbR44UlHSPFU-GpYRsWktOw 2025-06-13 22:36:03+00:00| seen|...

CVE-2025-5864

A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of...