diff --git a/advisories/unreviewed/2024/09/GHSA-7m4m-pwhv-49c5/GHSA-7m4m-pwhv-49c5.json b/advisories/unreviewed/2024/09/GHSA-7m4m-pwhv-49c5/GHSA-7m4m-pwhv-49c5.json
index 0f4fe5bbd9f..8984e77fdf8 100644
--- a/advisories/unreviewed/2024/09/GHSA-7m4m-pwhv-49c5/GHSA-7m4m-pwhv-49c5.json
+++ b/advisories/unreviewed/2024/09/GHSA-7m4m-pwhv-49c5/GHSA-7m4m-pwhv-49c5.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7m4m-pwhv-49c5",
-  "modified": "2024-09-04T00:31:14Z",
+  "modified": "2025-06-03T12:30:30Z",
   "published": "2024-09-03T18:31:32Z",
   "aliases": [
     "CVE-2024-6119"
@@ -35,9 +35,21 @@
       "type": "WEB",
       "url": "https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html"
+    },
     {
       "type": "WEB",
       "url": "https://openssl-library.org/news/secadv/20240903.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20240912-0001"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2024/09/03/4"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/05/GHSA-27jg-5m5x-f2g4/GHSA-27jg-5m5x-f2g4.json b/advisories/unreviewed/2025/05/GHSA-27jg-5m5x-f2g4/GHSA-27jg-5m5x-f2g4.json
index 83e40a51b06..b5faeafc357 100644
--- a/advisories/unreviewed/2025/05/GHSA-27jg-5m5x-f2g4/GHSA-27jg-5m5x-f2g4.json
+++ b/advisories/unreviewed/2025/05/GHSA-27jg-5m5x-f2g4/GHSA-27jg-5m5x-f2g4.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-27jg-5m5x-f2g4",
-  "modified": "2025-05-25T00:31:50Z",
+  "modified": "2025-06-03T12:30:30Z",
   "published": "2025-05-25T00:31:50Z",
   "aliases": [
     "CVE-2025-5137"
@@ -38,6 +38,10 @@
     {
       "type": "WEB",
       "url": "https://vuldb.com/?submit.571933"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.585711"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/06/GHSA-4pwr-grmg-37qm/GHSA-4pwr-grmg-37qm.json b/advisories/unreviewed/2025/06/GHSA-4pwr-grmg-37qm/GHSA-4pwr-grmg-37qm.json
new file mode 100644
index 00000000000..60921e25040
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-4pwr-grmg-37qm/GHSA-4pwr-grmg-37qm.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4pwr-grmg-37qm",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-5493"
+  ],
+  "details": "A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file /e3api/api/main/ToJsonByControlName. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5493"
+    },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/@luoluoxi311/sql-injection-in-baison-channel-middleware-product-version-2-0-1-e0d1ec95c697"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.310910"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.310910"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.586972"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T11:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-7jm7-hq43-3vg3/GHSA-7jm7-hq43-3vg3.json b/advisories/unreviewed/2025/06/GHSA-7jm7-hq43-3vg3/GHSA-7jm7-hq43-3vg3.json
new file mode 100644
index 00000000000..433c9188b6f
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-7jm7-hq43-3vg3/GHSA-7jm7-hq43-3vg3.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7jm7-hq43-3vg3",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-4205"
+  ],
+  "details": "The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popupID' parameter in all versions up to, and including, 1.20.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/popup-maker/tags/1.20.4/assets/js/site.js#L869"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3303770"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/popup-maker/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/58fe6f67-1139-4d3e-864d-3966cede5077?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T12:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-8jv6-3xj6-gq9g/GHSA-8jv6-3xj6-gq9g.json b/advisories/unreviewed/2025/06/GHSA-8jv6-3xj6-gq9g/GHSA-8jv6-3xj6-gq9g.json
new file mode 100644
index 00000000000..f089c6df16f
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-8jv6-3xj6-gq9g/GHSA-8jv6-3xj6-gq9g.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8jv6-3xj6-gq9g",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-5492"
+  ],
+  "details": "A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnerability is the function sub_456DE8 of the file /msp_info.htm?flag=cmd of the component /usr/sbin/jhttpd. The manipulation of the argument cmd leads to command injection. The attack can be launched remotely.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5492"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.310909"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.310909"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.575244"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dlink.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T11:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-97j7-rmfc-jv53/GHSA-97j7-rmfc-jv53.json b/advisories/unreviewed/2025/06/GHSA-97j7-rmfc-jv53/GHSA-97j7-rmfc-jv53.json
new file mode 100644
index 00000000000..0583651658d
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-97j7-rmfc-jv53/GHSA-97j7-rmfc-jv53.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-97j7-rmfc-jv53",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-31359"
+  ],
+  "details": "A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31359"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2160"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2160"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T10:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-cv4p-gxqj-fq6g/GHSA-cv4p-gxqj-fq6g.json b/advisories/unreviewed/2025/06/GHSA-cv4p-gxqj-fq6g/GHSA-cv4p-gxqj-fq6g.json
new file mode 100644
index 00000000000..3f677e085a4
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-cv4p-gxqj-fq6g/GHSA-cv4p-gxqj-fq6g.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cv4p-gxqj-fq6g",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-5340"
+  ],
+  "details": "The Music Player for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘album_buy_url’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5340"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/music-player-for-elementor/tags/2.4.6/classes/widgets/slide-music-player-free.php#L1205"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3304812"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/music-player-for-elementor/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/193d9625-34ab-497f-987e-5a53ca01e73e?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T12:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-f2vx-65mp-r4fp/GHSA-f2vx-65mp-r4fp.json b/advisories/unreviewed/2025/06/GHSA-f2vx-65mp-r4fp/GHSA-f2vx-65mp-r4fp.json
new file mode 100644
index 00000000000..6a1c32b8664
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-f2vx-65mp-r4fp/GHSA-f2vx-65mp-r4fp.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f2vx-65mp-r4fp",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2024-54189"
+  ],
+  "details": "A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By using a hard link, an attacker can write to an arbitrary file, potentially leading to privilege escalation.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54189"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2124"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2124"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-62"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T10:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-h429-pw2c-7w4q/GHSA-h429-pw2c-7w4q.json b/advisories/unreviewed/2025/06/GHSA-h429-pw2c-7w4q/GHSA-h429-pw2c-7w4q.json
new file mode 100644
index 00000000000..a1937ce92b3
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-h429-pw2c-7w4q/GHSA-h429-pw2c-7w4q.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h429-pw2c-7w4q",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:30Z",
+  "aliases": [
+    "CVE-2024-52561"
+  ],
+  "details": "A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52561"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2123"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2123"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-708"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T10:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-jqmx-89c6-9c25/GHSA-jqmx-89c6-9c25.json b/advisories/unreviewed/2025/06/GHSA-jqmx-89c6-9c25/GHSA-jqmx-89c6-9c25.json
new file mode 100644
index 00000000000..01d37c6c6dd
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-jqmx-89c6-9c25/GHSA-jqmx-89c6-9c25.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jqmx-89c6-9c25",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-4392"
+  ],
+  "details": "The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via html File uploads in all versions up to, and including, 1.7.48 due to insufficient input sanitization and output escaping within the sanitize_file() function. This makes it possible for unauthenticated attackers to bypass the plugin’s MIME-only checks and inject arbitrary web scripts in pages that will execute whenever a user accesses the html file.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4392"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/anssilaitila/shared-files/blob/master/admin/class-sf-admin-allow-more-file-types.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3304053"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/shared-files/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/469a9c8a-0708-4c93-99d8-e9157a1f91f5?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T10:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-v8hq-756r-cj74/GHSA-v8hq-756r-cj74.json b/advisories/unreviewed/2025/06/GHSA-v8hq-756r-cj74/GHSA-v8hq-756r-cj74.json
new file mode 100644
index 00000000000..3368f1e5c2d
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-v8hq-756r-cj74/GHSA-v8hq-756r-cj74.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v8hq-756r-cj74",
+  "modified": "2025-06-03T12:30:31Z",
+  "published": "2025-06-03T12:30:31Z",
+  "aliases": [
+    "CVE-2025-4671"
+  ],
+  "details": "The Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's user_meta and compare shortcodes in all versions up to, and including, 3.13.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4671"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.13.8/admin/advanced-settings/includes/shortcodes/compare.php#L5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.13.8/admin/advanced-settings/includes/shortcodes/usermeta.php#L5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3304692"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wordpress.org/plugins/profile-builder/#developers"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/346c9785-0069-40ec-a255-fe2dae30f7a0?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T12:15:22Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-w3cx-68mp-rwcw/GHSA-w3cx-68mp-rwcw.json b/advisories/unreviewed/2025/06/GHSA-w3cx-68mp-rwcw/GHSA-w3cx-68mp-rwcw.json
new file mode 100644
index 00000000000..bd7253b1999
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-w3cx-68mp-rwcw/GHSA-w3cx-68mp-rwcw.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w3cx-68mp-rwcw",
+  "modified": "2025-06-03T12:30:30Z",
+  "published": "2025-06-03T12:30:30Z",
+  "aliases": [
+    "CVE-2024-36486"
+  ],
+  "details": "A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver tool decompresses the file and writes the content back to its original location using root privileges. An attacker can exploit this process by using a hard link to write to an arbitrary file, potentially resulting in privilege escalation.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36486"
+    },
+    {
+      "type": "WEB",
+      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2126"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2126"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-62"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T10:15:20Z"
+  }
+}
\ No newline at end of file