CVE-2025-6621

creationtimestamp| type| source ---|---|--- 2025-06-25 18:52:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19521 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6618

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19491 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6619

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19490 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6615

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19488 2025-06-25 17:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh5i24mhj2m 2025-06-30 20:26:57+00:00| seen|...

GHSA-W8JV-RG3H-FC68

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19475...

CVE-2025-50179

Summary: CVE-2025-50179 affects Tuleap. The vulnerability is a cross-site request forgery (CSRF) that could allow an attacker to trick victims into changing canned responses. Affected products are Tuleap Community Edition prior to 16.8.99.1749830289 and Tuleap Enterprise Edition prior to 16.9-1. ...

CVE-2025-50179 Tuleap missing CSRF protection on tracker reports manipulation

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims...

CVE-2025-6433

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This...

CVE-2025-0966

creationtimestamp| type| source ---|---|--- 2025-06-25 03:47:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19416 2025-06-25 06:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfxyz6f3425...

CVE-2025-6650

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-435/ 2025-06-25 21:50:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19537 2025-06-26 00:48:09+00:00| seen|...

CVE-2025-6642

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-427/ 2025-06-25 21:50:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19529...

CVE-2025-6645

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-430/ 2025-06-25 21:50:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19532...

PT-2025-26815 · Brother Industries +2 · Dcp-7090Dw +199

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52882

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19405 2025-06-24 22:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4ntyp4n2u 2025-09-23 15:33:13+00:00| seen|...

CVE-2025-52888

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-50693

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19381 2025-06-24 20:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewiym2qz2p...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...