CVE-2025-6627

creationtimestamp| type| source ---|---|--- 2025-06-25 18:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19503 2025-06-25 21:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshkvlhbh62m 2025-06-30 20:26:59+00:00| seen|...

CVE-2025-6619

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19490 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6618 TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function SetWLanApcliSettings of the file wps.so. The manipulation of the argument PIN leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-52999

jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly...

CVE-2025-6614

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19489 2025-06-25 17:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh4w57zuv2m 2025-06-30 20:26:57+00:00| seen|...

CVE-2025-52483

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19474 2025-06-25 17:05:44+00:00| seen| https://bsky.app/profile/potato.software/post/3lsh3udh2dr2x...

CVE-2025-52479

The CVE-2025-52479 issue affects URIs.jl (before v1.6.0) and HTTP.jl (before v1.10.17), enabling construction of URIs containing CR/LF characters and potentially enabling CRLF injection. The vulnerability is described in OSV-JLSEC-2025-1 and corroborated by Red Hat and CVE sources: using vulnerab...

CVE-2025-6610

creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19470 2025-06-25 16:41:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh2jg3egg2r...

CVE-2025-49135

CVAT (open source CV annotation tool) versions 2.2.0–2.39.0 have a missing validation during the import of project/task backups, where the filename in the query parameter is not verified to refer to a TUS-uploaded file owned by the same user. An account with a user role who knows other users’ fil...

CVE-2025-6607

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19460 2025-06-25 16:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsgzs2yumr2q...

CVE-2025-6609

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19444 2025-06-25 17:01:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh3n7wl2g2q...

CVE-2025-6431

When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. This bug only affects...

CVE-2025-6603

creationtimestamp| type| source ---|---|--- 2025-06-25 10:49:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19434 2025-06-25 11:37:47+00:00| seen| https://bsky.app/profile/potato.software/post/3lsgjjvqjzz2x 2025-06-25 14:29:31+00:00| seen|...

CVE-2025-52938

Out-of-bounds Read vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associated with program files lparser.C. This issue affects NotepadNext: through v0.11. The singlevar in lparser.c lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-read th...

CVE-2025-6661

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-446/ 2025-06-26 00:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshu4updm72u...

CVE-2025-6640

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-425/ 2025-06-25 21:50:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19527...

CGA-P899-8W4F-7VCH

Bulletin has no description...

D-Link Device Detection (SNMP)

SNMP based detection of D-Link devices. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.171560";...

CVE-2025-6582

creationtimestamp| type| source ---|---|--- 2025-06-24 23:49:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19412 2025-06-25 02:13:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfjzm3ivi2u...

CVE-2025-45878

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19402 2025-06-25 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lshj3dnqjg22...