CVE-2025-48054

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17604 2025-05-27 05:00:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4vsqoyz352 2025-05-27...

CVE-2025-48828

Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the "vardump""test" syntax, attackers can bypass security checks and execute...

CVE-2025-48827

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025...

CVE-2025-5217

creationtimestamp| type| source ---|---|--- 2025-05-27 00:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17588 2025-05-27 03:36:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq4r45qmbw27 2025-05-27 03:36:32+00:00| seen|...

CVE-2025-48828

Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the "vardump""test" syntax, attackers can bypass security checks and execute...

CVE-2025-48827

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025...

EUVD-2025-28267

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025...

CVE-2025-5203

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this...

CVE-2025-5201

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be...

CVE-2025-23394

creationtimestamp| type| source ---|---|--- 2025-05-26 15:47:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17567 2025-05-26 17:23:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq3ougjbbhm2 2025-05-26 17:46:51+00:00| seen|...

CVE-2025-40650

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17561 2025-05-26 14:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dy3ntmz2a 2025-05-26 15:28:54+00:00| seen|...

CERTFR-2025-ACT-022

creationtimestamp| type| source ---|---|--- 2025-05-26 12:40:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lq3734nb3h22 2025-05-26 12:40:54+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114574180514996446...

CVE-2025-5182

creationtimestamp| type| source ---|---|--- 2025-05-26 11:47:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17552 2025-12-31 15:00:07+00:00| published-proof-of-concept| Telegram/ex7NUVZZvMqDEQ0oFhnWKTWAaNSokjzWKAoBZNpkQB-yE...

CVE-2025-4053

creationtimestamp| type| source ---|---|--- 2025-05-26 10:47:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17547 2025-05-26 13:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3chkhrqy2m 2025-05-27 13:22:24+00:00| seen|...

Malicious code in ideals-theming (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...

Malicious code in pushlabzy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b72cad9f6511e2786488a831c354d6e529f02319374d5dc97ccfd5efaa849aa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3ether (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71eb646c8da392b6145a0d668591f463f2439263b4a3dca2a5ecd0d6848f9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vega-embed-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f598c2282a0fd068c54ef02bd7ee8232523d615d6a0144b450e6002b0c95ab5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5163

creationtimestamp| type| source ---|---|--- 2025-05-26 01:47:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17521 2025-05-26 06:04:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq2ivpb2ls2j...

CVE-2025-5166

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to...