CVE-2025-6433

creationtimestamp| type| source ---|---|--- 2025-06-24 16:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lseje2ar5n2a 2026-04-13 17:56:26+00:00| seen| Telegram/2lmY4PxMcctl1EtJ4ibPRxsoFbGfFPPqdEaD1gjW88BKsUA...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...

CVE-2025-49151

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-24 20:06:42+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lseviyt4wp2a 2025-06-25 16:45:14+00:00| seen|...

CVE-2025-48890

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19311 2025-06-24 06:28:13+00:00| seen|...

CVE-2025-43879

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19312 2025-06-24 06:13:12+00:00| seen|...

CVE-2025-34038

creationtimestamp| type| source ---|---|--- 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-24 03:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19305 2025-06-25 21:02:24+00:00| seen|...

CVE-2025-34039

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19282 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:24+00:00| seen|...

CVE-2025-34031

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 02:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19296 2025-06-24 04:26:56+00:00| seen|...

OSV-2025-486 Bad-cast to cv::PngDecoder from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...

OSV-2025-485 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426843906 Crash type: Use-of-uninitialized-value Crash state: pcpp::IDnsResource::decodeName pcpp::IDnsResource::IDnsResource pcpp::DnsLayer::parseResources...

Allure Report 代码问题漏洞

Allure Report is a flexible, lightweight, multi-language test reporting tool from the Allure Framework open source. A code issue vulnerability exists in Allure Report 2 versions prior to 2.34.1, which stems from xunit-xml-plugin not securely configuring the XML parser, which could lead to XXE...

PT-2025-26754 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 2.0 Description: The issue is related to Cross Site Scripting XSS in the odms/admin/view-user-queries.php file. This allows for potential malicious script injection. Recommendations: For...

PT-2025-26765 · Unknown · Custom Rss Widget +1

Name of the Vulnerable Software and Affected Versions: AccuWeather and Custom RSS widget affected versions not specified Description: A cross-site scripting issue exists in the AccuWeather and Custom RSS widget, allowing an unauthenticated user to replace the RSS feed URL with a malicious one...

CVE-2025-52562

creationtimestamp| type| source ---|---|--- 2025-06-23 21:31:05+00:00| seen| Telegram/3KuJxnL-u9Q1MXHm7LBK-vISfp2Lp9FGxNigrPHhkXm0g 2025-06-24 00:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscubowbrb2m 2025-06-24 07:35:12+00:00| seen|...

CVE-2025-49126

creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19235 2025-06-23 18:30:40+00:00| published-proof-of-concept| Telegram/llanlRrbf3s9Rf868KZ425GV5KlSiI6fIpB3qhtKPPXkg-A 2025-06-23 19:29:24+00:00| seen|...

XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks

Cybersecurity researchers have uncovered a Go-based malware called XDigo that has been used in attacks targeting Eastern European governmental entities in March 2025. The attack chains are said to have leveraged a collection of Windows shortcut LNK files as part of a multi-stage procedure to depl...

CVE-2025-6512 Scripts within reports executable on BRAIN2 Server

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-6512

CVE-2025-6512 affects BRAIN2 (PT-Security entry PT-2025-26595) with BRAIN2 versions 0.0–3.05 vulnerable to code injected via report scripts by non-admin users. The script in a report can be executed on the BRAIN2 server with administrator rights, enabling potential code injection. Root cause: imp...

CVE-2025-6445

creationtimestamp| type| source ---|---|--- 2025-06-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-416/ 2025-06-25 18:51:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19512 2025-06-25 21:29:52+00:00| seen|...

CVE-2025-6499

creationtimestamp| type| source ---|---|--- 2025-06-23 02:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19176 2025-06-23 03:53:02+00:00| seen| https://bsky.app/profile/potato.software/post/3lsaomznbf724 2025-06-23 06:18:47+00:00| seen|...