EUVD-2025-16214

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025...

CVE-2025-48925

Summary: The TeleMessage service (through 2025-05-05) relies on a client-side MD5 hashing step (in the TM SGNL app) and accepts the resulting hash as the authentication credential. This design implies that authentication can be performed using a hash generated on the client, effectively tying cre...

CVE-2025-2826

creationtimestamp| type| source ---|---|--- 2025-05-27 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114582383243251984...

CVE-2025-5279

creationtimestamp| type| source ---|---|--- 2025-05-27 20:31:26+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lq6jtgfb5u22 2025-05-27 20:59:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lexpmmf42 2025-05-27...

CVE-2025-5250

creationtimestamp| type| source ---|---|--- 2025-05-27 17:47:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6anwzr5662 2025-05-27 17:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17689...

CVE-2025-5248

creationtimestamp| type| source ---|---|--- 2025-05-27 16:52:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17663 2025-05-27 17:06:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq667ldjfe62...

CVE-2025-2236

creationtimestamp| type| source ---|---|--- 2025-05-27 15:50:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6246g76ga2...

CVE-2025-48798

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues...

CVE-2025-5263

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17630 2025-05-27 13:16:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rft54ws72 2025-05-27 13:49:48+00:00| seen|...

CVE-2025-5268

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17625 2025-05-27 13:16:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rffkkfyz2 2025-05-27 13:53:09+00:00| seen|...

CVE-2025-5269

creationtimestamp| type| source ---|---|--- 2025-05-27 12:48:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17624 2025-05-27 13:16:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5rfcewwe62 2025-05-27 14:26:14+00:00| seen|...

CVE-2025-41651

creationtimestamp| type| source ---|---|--- 2025-05-27 08:48:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17614 2025-05-27 09:07:03+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:03+00:00| seen|...

Malicious code in airdrop-interface-markets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159a4dce9883ef2c1edd948d35a42feea7e9a7c3ac873bbc1a28e54f9b482004 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airdrop-interface-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b659b04caefd64c23fa0ab168a39c3230fcb5fd6eaf85213608b60479faf32f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newquest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a849e1ffa2a1ed558e656470b768587636a31790355a8266058e4d9f0edef839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in andes-landings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5517e4d951819beeb0f96046d333d0f194e89f07cc61805837ed73e7ef85c77d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b640328fee2106b3dea2217776fa00ee07982e485871045f8e3be307311062d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59185b898e04a16e418a740d085ad977bbc901e17c445f86b27aa97daa97725b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4548827f9bd601d4ff29713865fca74fb2e28b90aae485f5656f48ac2a6275e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-48827

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17606 2025-05-27 05:35:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4xrqhgwpy2 2025-05-27...