research

mildly interesting:

• CVE-2024-52510 - Confidentiality Break in Nextcloud Encryption

• CVE-2025-5876{0-3} - Preauth RCE in Tautulli for Plex Media Server

• Preauthentication RCE in Pydio Core

• Soundness violations in popular zero knowledge proof libraries

• A technique for connection pool DoS in the Rocket web framework

not so interesting:

• CVE-2025-62381 - Prototype Pollution in sveltekit-superforms

• CVE-2025-6025{4-6} - BAC → IDOR → XSS chain in Succeedium

• CVE-2025-58449 - High privilege RCE in Maho eCommerce

• GHSA-73h4-xwvc-g83w - Arbitrary File Read in Rotki