CVE-2025-6433

If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transport established without errors". This...

CVE-2025-0966

creationtimestamp| type| source ---|---|--- 2025-06-25 03:47:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19416 2025-06-25 06:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsfxyz6f3425...

CVE-2025-6650

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-435/ 2025-06-25 21:50:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19537 2025-06-26 00:48:09+00:00| seen|...

CVE-2025-6642

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-427/ 2025-06-25 21:50:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19529...

CVE-2025-6645

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-430/ 2025-06-25 21:50:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19532...

PT-2025-26815 · Brother Industries +2 · Dcp-7090Dw +199

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language PJL command that will crash the target device. The device will reboot, after which the attacker...

CVE-2025-52888

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19409 2025-06-24 22:34:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf5qxgm7c2o...

CVE-2025-52882

creationtimestamp| type| source ---|---|--- 2025-06-24 20:48:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19405 2025-06-24 22:14:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsf4ntyp4n2u 2025-09-23 15:33:13+00:00| seen|...

CVE-2025-52888

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-52888 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-50693

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19381 2025-06-24 20:24:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewiym2qz2p...

CVE-2025-50695

creationtimestamp| type| source ---|---|--- 2025-06-24 16:47:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19379 2025-06-24 20:29:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsewrwzik22o...

CVE-2025-6433

creationtimestamp| type| source ---|---|--- 2025-06-24 16:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lseje2ar5n2a 2026-04-13 17:56:26+00:00| seen| Telegram/2lmY4PxMcctl1EtJ4ibPRxsoFbGfFPPqdEaD1gjW88BKsUA...

CVE-2025-46416

creationtimestamp| type| source ---|---|--- 2025-06-24 16:04:16+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsehxijmf62s 2025-06-24 16:39:35+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsejwnahuu27 2025-06-27 16:57:35+00:00|...

CVE-2025-49151

creationtimestamp| type| source ---|---|--- 2025-06-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07 2025-06-24 20:06:42+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lseviyt4wp2a 2025-06-25 16:45:14+00:00| seen|...

CVE-2025-43879

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19312 2025-06-24 06:13:12+00:00| seen|...

CVE-2025-48890

creationtimestamp| type| source ---|---|--- 2025-06-24 05:32:37+00:00| seen| Telegram/U2NCrjFaUt9bKnx7p-SuklJbEiIwayTgmv0yP2ZPyo5eTfc 2025-06-24 05:49:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19311 2025-06-24 06:28:13+00:00| seen|...

CVE-2025-34038

creationtimestamp| type| source ---|---|--- 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-24 03:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19305 2025-06-25 21:02:24+00:00| seen|...

CVE-2025-34039

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19282 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:24+00:00| seen|...