CVE-2025-34038

creationtimestamp| type| source ---|---|--- 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-24 03:48:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19305 2025-06-25 21:02:24+00:00| seen|...

CVE-2025-34039

creationtimestamp| type| source ---|---|--- 2025-06-24 01:46:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19282 2025-06-24 02:34:27+00:00| published-proof-of-concept| Telegram/nIXrd68JPRslpKJ78-Anip-Gt9UVTfpwRW1S7IBK0x2u7Jw 2025-06-25 21:02:24+00:00| seen|...

CVE-2025-34031

creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 02:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19296 2025-06-24 04:26:56+00:00| seen|...

OSV-2025-486 Bad-cast to cv::PngDecoder from invalid vptr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426783958 Crash type: Bad-cast Crash state: Bad-cast to cv::PngDecoder from invalid vptr cv::PngDecoder::readData cv::imdecode...

OSV-2025-485 Use-of-uninitialized-value in pcpp::IDnsResource::decodeName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426843906 Crash type: Use-of-uninitialized-value Crash state: pcpp::IDnsResource::decodeName pcpp::IDnsResource::IDnsResource pcpp::DnsLayer::parseResources...

Allure Report: Code-related vulnerabilities

Allure Report is a flexible, lightweight, multi-language test reporting tool from the Allure Framework open source. A code issue vulnerability exists in Allure Report 2 versions prior to 2.34.1, which stems from xunit-xml-plugin not securely configuring the XML parser, which could lead to XXE...

PT-2025-26754 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 2.0 Description: The issue is related to Cross Site Scripting XSS in the odms/admin/view-user-queries.php file. This allows for potential malicious script injection. Recommendations: For...

PT-2025-26765 · Unknown · Custom Rss Widget +1

Name of the Vulnerable Software and Affected Versions: AccuWeather and Custom RSS widget affected versions not specified Description: A cross-site scripting issue exists in the AccuWeather and Custom RSS widget, allowing an unauthenticated user to replace the RSS feed URL with a malicious one...

CVE-2025-52562

creationtimestamp| type| source ---|---|--- 2025-06-23 21:31:05+00:00| seen| Telegram/3KuJxnL-u9Q1MXHm7LBK-vISfp2Lp9FGxNigrPHhkXm0g 2025-06-24 00:39:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lscubowbrb2m 2025-06-24 07:35:12+00:00| seen|...

CVE-2025-49126

creationtimestamp| type| source ---|---|--- 2025-06-23 17:45:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19235 2025-06-23 18:30:40+00:00| published-proof-of-concept| Telegram/llanlRrbf3s9Rf868KZ425GV5KlSiI6fIpB3qhtKPPXkg-A 2025-06-23 19:29:24+00:00| seen|...

XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks

Cybersecurity researchers have uncovered a Go-based malware called XDigo that has been used in attacks targeting Eastern European governmental entities in March 2025. The attack chains are said to have leveraged a collection of Windows shortcut LNK files as part of a multi-stage procedure to depl...

CVE-2025-6512 Scripts within reports executable on BRAIN2 Server

On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-6512

CVE-2025-6512 affects BRAIN2 (PT-Security entry PT-2025-26595) with BRAIN2 versions 0.0–3.05 vulnerable to code injected via report scripts by non-admin users. The script in a report can be executed on the BRAIN2 server with administrator rights, enabling potential code injection. Root cause: imp...

CVE-2025-6445

creationtimestamp| type| source ---|---|--- 2025-06-23 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-416/ 2025-06-25 18:51:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19512 2025-06-25 21:29:52+00:00| seen|...

CVE-2025-6499

creationtimestamp| type| source ---|---|--- 2025-06-23 02:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19176 2025-06-23 03:53:02+00:00| seen| https://bsky.app/profile/potato.software/post/3lsaomznbf724 2025-06-23 06:18:47+00:00| seen|...

OSV-2025-484 Heap-buffer-overflow in load_protocols_file_fd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=426164365 Crash type: Heap-buffer-overflow READ 2 Crash state: loadprotocolsfilefd fuzzfilecfgprotocols.c...

Bizerba BRAIN2 security vulnerability

Bizerba BRAIN2 is an industrial software platform from Bizerba, Germany. A security vulnerability exists in Bizerba BRAIN2 that originates from the possibility that a non-administrative user may perform privileged operations via report scripts...

VulnCheck KEV: CVE-2025-34033

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the pingaddr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can...

Nipah virus Testing Management System /bwdates-report-ds.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

PT-2025-27677 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue is a heap-buffer-overflow READ vulnerability. The crash state indicates the vulnerability occurs within the load protocols file fd function in the...