CVE-2025-52993

A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user e.g., nixbld or guixbuild. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before...

CVE-2018-11239

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkcmbal2s 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d62699e9-a141-4cf5-8450-dd3c3b799922...

CVE-2025-52555

creationtimestamp| type| source ---|---|--- 2025-06-26 20:51:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19652 2025-06-26 21:40:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/282 2025-06-26 23:33:38+00:00| seen| https://seclists.org/oss-sec/2025/q2/283...

CVE-2025-5995

creationtimestamp| type| source ---|---|--- 2025-06-26 19:50:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19647 2025-06-27 00:35:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskfgvvkx223...

CVE-2025-34043

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19634 2025-06-26 20:29:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjxqh25vc2m 2025-06-27 21:02:20+00:00| seen|...

CVE-2025-34047

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19625 2025-06-26 20:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjytu4jk62p 2025-06-27 21:02:23+00:00| seen|...

CVE-2025-6700

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19611 2025-06-26 20:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjybs6x7k2s...

CVE-2025-52900

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set by the application. The same is true for the...

CVE-2025-6706

An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut down a server. The crash is triggered on affected versions by issuing an aggregation framework operation using a specific...

CVE-2025-6675

creationtimestamp| type| source ---|---|--- 2025-06-26 13:50:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19597 2025-06-26 18:40:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjrlscwzp25...

CVE-2025-5366

creationtimestamp| type| source ---|---|--- 2025-06-26 12:53:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19591 2025-06-26 15:24:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjgom7jqn2u...

CVE-2025-52900

creationtimestamp| type| source ---|---|--- 2025-06-26 12:08:14+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jj2r-455p-5gvf 2025-06-26 14:51:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19606 2025-06-26...

CVE-2025-5338

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19584 2025-06-26 12:24:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj4mh3jnr2u...

CVE-2025-6703

creationtimestamp| type| source ---|---|--- 2025-06-26 09:50:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19581 2025-06-26 12:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5hcwruh2r...

CVE-2025-53002

creationtimestamp| type| source ---|---|--- 2025-06-26 06:03:23+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-xj56-p8mm-qmxj 2025-06-26 14:51:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19608 2025-06-26...

CVE-2025-3279

creationtimestamp| type| source ---|---|--- 2025-06-26 05:49:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19574 2025-06-26 05:54:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lsigriehbcg2 2025-06-26...

CVE-2025-5929

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19571 2025-06-26 06:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsijyv6bgn2o...

CVE-2025-6546

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19567 2025-06-26 06:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsijpwqp7y2a...

CVE-2025-5540

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19551 2025-06-26 08:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipzt3vcl2q...

CVE-2025-6669 gooaclok819 sublinkX jwt.go hard-coded key

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be initiated remotely. Th...