CVE-2025-6526

creationtimestamp| type| source ---|---|--- 2025-06-23 22:47:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19271 2025-06-24 00:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscsmila6q2p...

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

CVE-2025-2828 SSRF Vulnerability in RequestsToolkit in langchain-ai/langchain

A Server-Side Request Forgery SSRF vulnerability exists in the RequestsToolkit component of the langchain-community package specifically, langchaincommunity.agenttoolkits.openapi.toolkit.RequestsToolkit in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does n...

CVE-2025-6545

creationtimestamp| type| source ---|---|--- 2025-06-23 18:45:09+00:00| published-proof-of-concept| https://github.com/browserify/pbkdf2/security/advisories/GHSA-h7cp-r72f-jxh6 2025-06-23 20:01:16+00:00| published-proof-of-concept| Telegram/1psvC7CezRzDdQQZmPDn29p4dA-tBW5Fsx58qYiO8Q7Mk 2025-06-23...

CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

CVE-2023-47298

creationtimestamp| type| source ---|---|--- 2025-06-23 14:45:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19205 2025-06-23 16:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsbyrqhj5u2p...

CVE-2025-6512

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-27387

creationtimestamp| type| source ---|---|--- 2025-06-23 09:44:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19187 2025-06-23 10:03:28+00:00| published-proof-of-concept| Telegram/GDm1H2yMsUWi0B2hrQwSaQ-hj0W8UNWimUdimX7TtAl1LE 2025-06-23 12:24:07+00:00| seen|...

CVE-2025-6510

creationtimestamp| type| source ---|---|--- 2025-06-23 09:22:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114731943756716970 2025-06-23 17:31:42+00:00| published-proof-of-concept| Telegram/nPEUyhGnsP59voT2ahckIV2qfXLOATZFAOqcmcKzo8MVrGY 2025-06-23 19:24:24+00:00| seen|...

CVE-2025-6499

creationtimestamp| type| source ---|---|--- 2025-06-23 02:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19176 2025-06-23 03:53:02+00:00| seen| https://bsky.app/profile/potato.software/post/3lsaomznbf724 2025-06-23 06:18:47+00:00| seen|...

CVE-2025-6487

creationtimestamp| type| source ---|---|--- 2025-06-22 18:44:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19172 2025-06-22 19:00:58+00:00| published-proof-of-concept| Telegram/nHwRDF2pACkOFCESw7WBf09x7jYFFFCQYf7GTcksxOZY6eE 2025-06-22 19:24:13+00:00| seen|...

CVE-2025-52923

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command...

CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be...

CVE-2025-31205

creationtimestamp| type| source ---|---|--- 2025-06-21 21:38:43+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ls5jaosfek2x...

CVE-2025-6413

creationtimestamp| type| source ---|---|--- 2025-06-21 18:46:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19124 2025-06-21 19:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5dnekmqi2a...

CVE-2025-6409

creationtimestamp| type| source ---|---|--- 2025-06-21 16:31:48+00:00| published-proof-of-concept| Telegram/N5xb8aPdHeqYoGeqIlWHSNd3ovkwt-hXN2mjrRLjnqW7ols 2025-06-21 16:44:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19120 2025-06-21 20:18:25+00:00| seen|...

CVE-2025-3629

creationtimestamp| type| source ---|---|--- 2025-06-21 13:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pkespq42i...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: rclone, buf, sftpgo, step-ca-fips, tkn-fips, dapr, step-ca, caddy-fips, kyverno-policy-reporter-ui-fips, step-issuer, gitness, step, step-issuer-fips, cloudflared, step-fips, dapr-fips, karma, tkn, rclone-fips, telegraf, caddy, gogatekeeper, kyverno-policy-reporter-u...

CVE-2025-5143

creationtimestamp| type| source ---|---|--- 2025-06-21 07:42:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19110 2025-06-21 09:48:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4bky4aif2v...