CVE-2025-1647

creationtimestamp| type| source ---|---|--- 2025-05-15 19:02:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7b7t3ke2h...

CVE-2025-47279

Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, th...

Malicious code in fastifiyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3da19b8f86e82a5ab61d8134531f7e1f001bf858555808eca76c3f03deeff06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-44183

creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvho3kw2p 2025-05-15 19:33:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16548...

CVE-2022-39108

creationtimestamp| type| source ---|---|--- 2025-05-15 14:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16505...

CVE-2025-22233

creationtimestamp| type| source ---|---|--- 2025-05-15 14:20:33+00:00| seen| https://bsky.app/profile/costalfy.framapiaf.org.ap.brid.gy/post/3lp7pi3v7ekq2 2025-05-15 14:32:44+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lp7q6x6i622x 2025-05-16 02:18:34+00:00| seen|...

CVE-2025-4516

There is an issue in CPython when using bytes.decode"unicodeescape", error="ignore|replace". If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the bytes.decode call in ...

CVE-2025-4697

creationtimestamp| type| source ---|---|--- 2025-05-15 13:33:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16486 2025-05-15 15:03:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhdgis2t...

Malicious code in att-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c60087067856675af280cf9525ccb222374a8ecb4467310fa46160b79ea4a5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CISA Releases Twenty-Two Industrial Control Systems Advisories

CISA released twenty-two Industrial Control Systems ICS advisories on May 15, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices ICSA-25-135-02 Siemens INTRALOG WMS...

CVE-2025-30174

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-09...

CVE-2025-31930

creationtimestamp| type| source ---|---|--- 2025-05-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-08...

CVE-2024-13914

creationtimestamp| type| source ---|---|--- 2025-05-15 05:32:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16450 2025-05-15 06:57:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrh5rtw2h...

CVE-2025-4094

creationtimestamp| type| source ---|---|--- 2025-05-15 04:50:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36841 2025-05-15 13:17:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36884 2025-05-21 22:41:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17207...

CVE-2025-22446

creationtimestamp| type| source ---|---|--- 2025-05-15 04:32:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16442...

Malicious code in nayan-videos-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1573283fc5f3c3cc201c1ab6beeac91054b77dcbcf01aa700ff72240c02260 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in o1js-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9235ed25ae95d4286d7a3d5379bd815865a81ccbbf126851fcc04271ec639987 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23165

creationtimestamp| type| source ---|---|--- 2025-05-15 01:06:35+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lp6d5gqzx327 2025-05-19 02:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16791 2025-05-19 05:13:23+00:00| seen|...

GHSA-QPJV-V59X-3QC4

creationtimestamp| type| source ---|---|--- 2025-05-14 23:33:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16435...

CVE-2015-7575

creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2025-12-16 12:21:21+00:00| seen| https://gist.github.com/jerinisready/f588121fb487feb7edbfe9ee2be11a0e...