CVE-2025-52883

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19398 2025-06-24 22:39:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5zvtylg2a...

CVE-2025-52884

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19397 2025-06-24 22:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4x7qzc72m...

CVE-2025-6556

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19395 2025-06-24 22:44:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf6cubai72k 2025-06-25 04:59:07+00:00| seen|...

CVE-2025-52880 Komga Vulnerable to Arbitrary Code Execution via Crafted EPUB File

Komga is a media server for comics, mangas, BDs, magazines and eBooks. A Cross-Site Scripting XSS vulnerability has been discovered in versions 1.8.0 through 1.21.3 when serving EPUB resources, either directly from the API, or when reading using the epub reader. The vulnerability lets an attacker...

CVE-2025-52566

A flaw was found in the tokenizer component of llama.cpp. This vulnerability allows heap memory corruption via carefully crafted text input during tokenization, due to a signed vs. unsigned integer overflow in the llamavocab::tokenize function. Mitigation Mitigation for this issue is either not...

CVE-2025-6434

creationtimestamp| type| source ---|---|--- 2025-06-24 16:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsekkcoiaq2o 2025-06-25 14:51:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19459...

CVE-2025-50699

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19380 2025-06-24 20:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsevo5e3n72r...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...

CVE-2025-6570

creationtimestamp| type| source ---|---|--- 2025-06-24 15:47:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19364 2025-06-24 20:19:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewa26a652k...

CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR...

CVE-2025-6425 The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR...

CVE-2025-49851

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05 2025-06-24 19:47:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19390 2025-06-25 01:34:53+00:00| seen|...

CVE-2025-52566

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation llamavocab::tokenize src/llama-vocab.cpp:3036 resulting in unintended behavior in tokens copying size comparison. Allowing...

CVE-2025-52566

creationtimestamp| type| source ---|---|--- 2025-06-24 03:48:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19297 2025-06-24 04:32:30+00:00| published-proof-of-concept| Telegram/xYRYp9RnMrs6asvPZWHHQ0msOulfM9P8474meOJ4G31k98 2025-06-24 05:43:11+00:00| seen|...

CVE-2025-52570

CVE-2025-52570 affects the Letmein port-knock implementation. Before version 10.2.1, the connection limiter is implemented incorrectly, allowing an arbitrary number of simultaneous incoming connections (TCP, UDP, and Unix socket) for the services letmeind and letmeinfwd. The num-connections optio...

CVE-2025-34041

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19278 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:26+00:00| seen|...

CVE-2025-34036 Shenzhen TVT CCTV-DVR Command Injection

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When th...

CVE-2025-34034 5VTechnologies Blue Angel Software Suite Hardcoded Credentials

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege...

CVE-2025-6534

creationtimestamp| type| source ---|---|--- 2025-06-24 00:46:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19275 2025-06-24 04:23:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdarud6xo25...

CVE-2025-6531

creationtimestamp| type| source ---|---|--- 2025-06-23 23:48:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19272 2025-06-24 04:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdab5cygs2a...