PT-2025-23134 · Next.Js · Next.Js

Name of the Vulnerable Software and Affected Versions: Next.js versions 13.0 through 15.2.2 Description: Next.js is a React framework for building full-stack web applications. In affected versions, Next.js may have allowed limited source code exposure when the dev server was running with the App...

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

CVE-2025-5266

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17627 2025-05-27 13:16:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rfncbduz2 2025-05-27 14:11:13+00:00| seen|...

CVE-2025-27464

creationtimestamp| type| source ---|---|--- 2025-05-27 12:20:56+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lq5ogdt6ua2m 2025-05-27 18:50:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/168 2025-05-27 21:38:26+00:00| seen|...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to json-smart (CVE-2024-57699)

Summary The Transformation Advisor tool in IBM App Connect Enterprise is vulnerable to a denial of service due to json-smart. Vulnerability Details CVEID:CVE-2024-57699 DESCRIPTION: A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input,...

Citrix Workspace App for Windows crash due to .NET 9.0.5

If you have any Current Release of Citrix Workspace App 2409.10 or higher, or LTSR version 2402 CU3 or higher and .NET Desktop Runtime 9.0.5 installed, receiver.exe could crash post session launch. Post crash, the systray icon would show up only two options - Open and Exit...

CVE-2025-5214

creationtimestamp| type| source ---|---|--- 2025-05-26 23:47:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17583 2025-05-26 23:57:09+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lq4eu6swmwj2...

CVE-2025-37992

creationtimestamp| type| source ---|---|--- 2025-05-26 15:23:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3i3ev3pjy2 2025-05-26 15:47:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17571 2025-05-26...

CVE-2025-40665

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17564 2025-05-26 14:13:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3eb24njm2a...

CVE-2025-40666

Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx...

CVE-2025-5165

creationtimestamp| type| source ---|---|--- 2025-05-26 03:47:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17525 2025-05-26 05:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2hrvffe62j...

CVE-2025-5161

creationtimestamp| type| source ---|---|--- 2025-05-26 00:46:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17519 2025-05-26 05:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2hk7sn6s2k...

📄 Remote for Mac 2025.6 Remote Code Execution

Remote for Mac version 2025.6 suffers from an unauthenticated remote code execution vulnerability. Exploit Title: Remote for Mac 2025.6 - Unauthenticated RCE Date: 2025-05-26 Exploit Author: Chokri Hammedi Vendor Homepage: https://cherpake.com/ Software Link: https://cherpake.com/latest.php?os=ma...

Fedora: Security Advisory (FEDORA-2024-ef9db8b16d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5159

creationtimestamp| type| source ---|---|--- 2025-05-25 23:46:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17517 2025-05-26 03:30:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2adqwdjs2w...

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

CVE-2025-5154 PhonePe App SQLite Database databases cleartext storage in a file or on disk

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

CVE-2025-5154 PhonePe App SQLite Database databases cleartext storage in a file or on disk

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

CVE-2025-5154

The CVE-2025-5154 entry applies to the PhonePe App (Android) version 25.03.21.0. The vulnerability resides in the SQLite Database component, specifically within app-private data at /data/data/com.phonepe.app/databases/, where sensitive data is stored in plaintext. This cleartext storage allows a ...