CVE-2025-52917

creationtimestamp| type| source ---|---|--- 2025-06-21 23:43:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19137 2025-06-22 02:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5zc5pxly2s 2025-08-07 10:00:00+00:00| seen|...

CVE-2025-6446

creationtimestamp| type| source ---|---|--- 2025-06-21 23:30:45+00:00| published-proof-of-concept| Telegram/5DOq2DiFQqVGP4NgcBlMmGjMiliyLoJ8urq1ooGyZBVufk 2025-06-21 23:43:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19139 2025-06-22 02:15:49+00:00| seen|...

CVE-2025-1987

creationtimestamp| type| source ---|---|--- 2025-06-21 21:47:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19129 2025-06-22 01:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5xpxfior2s...

CVE-2025-6408

creationtimestamp| type| source ---|---|--- 2025-06-21 15:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19118 2025-06-21 16:31:48+00:00| published-proof-of-concept| Telegram/N5xb8aPdHeqYoGeqIlWHSNd3ovkwt-hXN2mjrRLjnqW7ols 2025-06-21 17:53:59+00:00| seen|...

Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks

A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences...

CVE-2025-3629

creationtimestamp| type| source ---|---|--- 2025-06-21 13:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pkespq42i...

CVE-2025-6367

creationtimestamp| type| source ---|---|--- 2025-06-20 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls34mb6m4d2a 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-34024

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacter...

CVE-2025-25038

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to...

zkVM Underconstrained Vulnerability

Due to a missing constraint in the rv32im circuit, any 3-register RISC-V instruction including remu and divu in risc0-zkvm 2.0.0, 2.0.1, and 2.0.2 are vulnerable to an attack by a malicious prover. The main idea for the attack is to confuse the RISC-V virtual machine into treating the value of th...

CVE-2025-3319

creationtimestamp| type| source ---|---|--- 2025-06-20 15:44:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114716460122430571 2025-06-20 15:57:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114716511566293830 2025-06-20 17:23:08+00:00| seen|...

CVE-2025-6308 PHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the...

CVE-2025-49715

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 01:49:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114713178529573302...

OSV-2025-481 Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u,

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=425730091 Crash type: Stack-buffer-overflow READ 1 Crash state: void glz::from::op::op::opglz::optscsv10000u,...

OSV-2025-480 Stack-buffer-overflow in void glz::from<10000u, std::__1::__bit_reference<std::__1::vector<bool, std::__1

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=425725152 Crash type: Stack-buffer-overflow READ 1 Crash state: void glz::from::op::opglz::optscsv10000u,...

Nipah Virus Testing Management System Cross-Site Scripting Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. A cross-site scripting vulnerability exists in the Nipah Virus Testing Management System due to improper handling of the serachdata parameter in the /search-report.php file. An attacker could use this vulnerability to...

PHPGurukul Emergency Ambulance Hiring Portal 注入漏洞

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file...

PT-2025-26351 · Joe Hoyle · Wpthumb

Name of the Vulnerable Software and Affected Versions: Joe Hoyle WPThumb versions 0.10 and earlier Description: A Server-Side Request Forgery SSRF issue affects Joe Hoyle WPThumb, allowing for Server Side Request Forgery. Recommendations: For Joe Hoyle WPThumb versions 0.10 and earlier, update to...

Nipah Virus Testing Management System patient-report.php File SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that arises from insufficient filtering of the searchdata parameter in the patient-report.php file. An attacker can exploit this...

CVE-2025-6286

A vulnerability classified as problematic has been found in PHPGurukul COVID19 Testing Management System 2021. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument q leads to open redirect. It is possible to launch the attack remotely. The exploi...