GHSA-PX9R-875R-W534

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19463...

CVE-2025-6428

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19455...

CVE-2025-6427

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19454 2026-04-13 17:56:13+00:00| seen| Telegram/lqDSqm2dHkWfF4GBgx7aIf-cAm5uWwm6QBW4VZ7zFMqrGQ...

CVE-2025-6429

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19451...

CVE-2025-6425

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19449...

CVE-2023-4018

creationtimestamp| type| source ---|---|--- 2025-06-25 14:51:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19446...

CVE-2023-4702

creationtimestamp| type| source ---|---|--- 2025-06-25 13:50:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19443...

CVE-2023-38142

creationtimestamp| type| source ---|---|--- 2025-06-25 13:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19438 2026-07-26 07:01:24+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-27 00:01:27+00:00| seen| https://t.me/PositiveTechnologies/1860 2026-07-28 18:00:05+00:00| seen|...

RHSA-2025:4226

creationtimestamp| type| source ---|---|--- 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

RHSA-2025:9583

creationtimestamp| type| source ---|---|--- 2025-06-25 00:49:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19413...

CVE-2025-52572

Hikka, a Telegram userbot, has vulnerability affects all users on all versions of Hikka. Two scenarios are possible. 1. Web interface does not have an authenticated session: attacker can use his own Telegram account to gain RCE to the server by authorizing in the dangling web interface. 2. Web...

GHSA-M7MM-6JXP-2M4X

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19400...

GHSA-GJV3-89HH-9XQ2

creationtimestamp| type| source ---|---|--- 2025-06-24 20:47:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19397...

CVE-2025-52571

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known...

CVE-2025-52572 Hikka vulnerable to RCE through dangling web interface

Hikka, a Telegram userbot, has vulnerability affects all users on all versions of Hikka. Two scenarios are possible. 1. Web interface does not have an authenticated session: attacker can use his own Telegram account to gain RCE to the server by authorizing in the dangling web interface. 2. Web...

CVE-2025-52572

Hikka (Telegram userbot) is affected by an RCE/account-takeover vulnerability via the web interface. If the web UI has no authenticated session, an attacker can abuse access via their own Telegram account to gain RCE on the server. If an authenticated session exists, users may be tricked into app...

CVE-2025-52571 Hikka vulnerable to RCE through edits in a channel

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known...

CVE-2025-52571 Hikka vulnerable to RCE through edits in a channel

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known...

CVE-2025-52571 Hikka vulnerable to RCE through edits in a channel

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It allows an unauthenticated attacker to gain access to Telegram account of a victim, as well as full access to the server. The issue is patched in version 1.6.2. No known...

CVE-2025-52571

Hikka is a Telegram userbot vulnerable to an unauthenticated credential/remote access issue in all versions below 1.6.2. The root cause enables an attacker to gain access to a victim’s Telegram account and full control of the server. The vulnerability is patched in version 1.6.2; no public workar...