CVE-2025-52557

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19099 2025-06-21 05:53:26+00:00| seen|...

CVE-2025-6394

creationtimestamp| type| source ---|---|--- 2025-06-21 02:03:08+00:00| seen| Telegram/VYISubODK9o2EhmMQtV1Poo-UEd9SUXrb4Hppof0xM5PUw 2025-06-21 03:25:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19101 2025-06-21 06:24:51+00:00| seen|...

CVE-2025-52916

Yealink RPS before 2025-06-04 lacks SN verification attempt limits, enabling brute-force enumeration last five digits...

Haptic-Based User Authentication for Tele-robotic System

Tele-operated robots rely on real-time user behavior mapping for remote tasks, but ensuring secure authentication remains a challenge. Traditional methods, such as passwords and static biometrics, are vulnerable to spoofing and replay attacks, particularly in high-stakes, continuous interactions...

CVE-2025-34029

creationtimestamp| type| source ---|---|--- 2025-06-20 21:56:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zqqwvu625 2025-06-21 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nwbs527 2025-06-30 20:27:00+00:00| seen|...

CVE-2025-6351

creationtimestamp| type| source ---|---|--- 2025-06-20 19:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2snlnjfn2o...

CVE-2025-6361

creationtimestamp| type| source ---|---|--- 2025-06-20 19:43:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19051 2025-06-20 22:32:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls33rftr7o2a...

CVE-2025-6359

creationtimestamp| type| source ---|---|--- 2025-06-20 18:42:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19023 2025-06-20 22:22:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls337iwynz2o...

CVE-2025-6275

A use-after-free vulnerability has been discovered in WebAssembly's WebAssembly Binary Toolkit wabt, specifically within the GetFuncOffset function. This flaw can be triggered by an attacker with local system access through the manipulation of input provided to this function. Successful...

CVE-2025-50011

CVE-2025-50011 : Stored Cross-Site Scripting in the WordPress plugin “Recipes manager – WPH” (versions up to 1.0.4). Root cause: improper input neutralization during web page generation. Affected: Recipes manager – WPH for WordPress. Impact: stored XSS as described in sources; details on exploit ...

CVE-2025-38040

In the Linux kernel, the following vulnerability has been resolved: serial: mctrlgpio: split disablems into sync and nosync APIs The following splat has been observed on a SAMA5D27 platform using atmelserial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 inatomic: ...

CVE-2025-6340

creationtimestamp| type| source ---|---|--- 2025-06-20 13:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18943 2025-06-20 13:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls26jcvyn62u...

CVE-2025-6337

TOTOLINK A3002R/A3002RU (versions 3.0.0-B20230809.1615 through 4.0.0-B20230531.1404) contain a buffer overflow in the HTTP POST Request Handler via the submit-url argument of /boafrm/formTmultiAP. Root cause: insufficient validation of the input length/size of submit-url leading to remote code ex...

CVE-2025-50054

creationtimestamp| type| source ---|---|--- 2025-06-20 07:45:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18914 2025-06-20 09:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrzr5pawfm2k 2025-06-22 09:44:12+00:00| seen|...

CVE-2025-6316

creationtimestamp| type| source ---|---|--- 2025-06-20 07:45:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18912 2025-06-20 08:03:11+00:00| published-proof-of-concept| Telegram/gqSaqsnEkaawAvKywG0gW1yPLxl1Qzqy06eWxG6428-oEk 2025-06-20 09:57:06+00:00| seen|...

CVE-2025-6302

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Comment leads to stack-based buffer overflow. It is possible to launch the attack...

PT-2025-26360 · Unknown · Cookie-Script.Com

Name of the Vulnerable Software and Affected Versions: Cookie-Script.com versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in Cookie Script, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...

CVE-2025-45331

brplot v420.69.1 contains a Null Pointer Dereference NPD vulnerability in the brdagenshandleonce function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes...

VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels

Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...

CVE-2025-6281

creationtimestamp| type| source ---|---|--- 2025-06-19 21:44:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18882 2025-06-20 00:08:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lryqo53l3223...