CVE-2025-31698

creationtimestamp| type| source ---|---|--- 2025-06-17 19:26:35+00:00| seen| https://seclists.org/oss-sec/2025/q2/264 2025-06-20 14:43:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18973...

CVE-2025-6191

creationtimestamp| type| source ---|---|--- 2025-06-17 19:21:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114700324946397753 2025-06-18 00:58:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrtskls3hz26 2025-06-18 03:23:51+00:00| seen|...

CVE-2025-49881

creationtimestamp| type| source ---|---|--- 2025-06-17 17:58:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt33ypkkh2m...

CVE-2025-0320

creationtimestamp| type| source ---|---|--- 2025-06-17 13:39:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18586 2025-06-17 14:50:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114699261299007014...

CVE-2025-4879

creationtimestamp| type| source ---|---|--- 2025-06-17 13:39:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18585 2025-06-17 13:43:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114698996243649577...

CVE-2025-49848

creationtimestamp| type| source ---|---|--- 2025-06-17 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-02 2025-06-17 19:02:49+00:00| seen| Telegram/iY1e4d35r5DuMD6xVc0zCjzUfsszbqmNzOIDQdgMzjjccfQ...

PT-2025-25632 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A deserialization issue is mentioned, but details are not provided. No information is available about the estimated number of potentially affected devices or real-world incidents...

CVE-2025-49794

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18464 2025-06-16 16:24:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693966654084445 2025-06-16 16:33:33+00:00| seen|...

GHSA-4QQF-9M5C-W2C5 Weblate exposes personal IP address via e-mail

Impact The audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. Patches This issue has been addressed in Weblate 5.12 via https://github.com/WeblateOrg/weblate/pull/15102. References Thanks to...

CVE-2025-49125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18453 2025-06-16 15:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693644318306796 2025-06-16 15:19:46+00:00| seen| https://seclists.org/oss-sec/2025/q2/253...

CVE-2025-6165

creationtimestamp| type| source ---|---|--- 2025-06-16 14:08:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693431824068032 2025-06-17 06:39:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18568 2025-06-17 07:00:59+00:00| published-proof-of-concept|...

CVE-2025-6164

creationtimestamp| type| source ---|---|--- 2025-06-16 13:54:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693378725524836 2025-06-17 05:40:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18564 2025-06-17 07:27:58+00:00| seen|...

CVE-2025-5689

creationtimestamp| type| source ---|---|--- 2025-06-16 12:42:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18446 2025-06-16 19:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694747478598696 2025-06-16 19:47:13+00:00| seen|...

CVE-2025-40728

CVE-2025-40728 affects Customer Support System v1.0. SQL injection via the id parameter in /customer_support/manage_user.php enables an authenticated attacker to retrieve, create, update, and delete databases. The advisories describe high impact (confidentiality/integrity/availability) with low a...

CVE-2025-6102

creationtimestamp| type| source ---|---|--- 2025-06-16 04:02:17+00:00| published-proof-of-concept| Telegram/IWgL-7hijIDfZWh3thMsnAy1768rz69pWolDkfnZ1T6kfIs 2025-06-16 04:04:08+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114691057117107590 2025-06-16 07:27:51+00:00| seen|...

PT-2025-25523 · Javahongxi · Whatsmars

Name of the Vulnerable Software and Affected Versions: javahongxi whatsmars version 2021.4.0 Description: A problem has been found that affects the initialize function of the file...

CVE-2025-5337

creationtimestamp| type| source ---|---|--- 2025-06-14 09:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18375 2025-06-14 13:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrl2h65l7s2o...

CVE-2025-50148

creationtimestamp| type| source ---|---|--- 2025-06-14 07:21:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrkg2v7mwt2p...

OSV-2025-457 Heap-buffer-overflow in xmlParsePubidLiteral

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=424242614 Crash type: Heap-buffer-overflow WRITE 1 Crash state: xmlParsePubidLiteral xmlParseExternalID xmlParseEntityDecl...

CVE-2025-48914

creationtimestamp| type| source ---|---|--- 2025-06-13 16:37:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18316 2025-06-13 17:31:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrixouteeg2k 2025-06-13 20:02:32+00:00| seen|...