diff --git a/advisories/github-reviewed/2025/06/GHSA-8j8w-wwqc-x596/GHSA-8j8w-wwqc-x596.json b/advisories/github-reviewed/2025/06/GHSA-8j8w-wwqc-x596/GHSA-8j8w-wwqc-x596.json
index 759bd98bdd3..88810cbf16a 100644
--- a/advisories/github-reviewed/2025/06/GHSA-8j8w-wwqc-x596/GHSA-8j8w-wwqc-x596.json
+++ b/advisories/github-reviewed/2025/06/GHSA-8j8w-wwqc-x596/GHSA-8j8w-wwqc-x596.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8j8w-wwqc-x596",
-  "modified": "2025-06-06T22:17:35Z",
+  "modified": "2025-06-09T06:30:21Z",
   "published": "2025-06-02T06:30:32Z",
   "aliases": [
     "CVE-2025-49113"
@@ -91,6 +91,10 @@
       "type": "WEB",
       "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.6.11"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00008.html"
+    },
     {
       "type": "WEB",
       "url": "https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10"
diff --git a/advisories/unreviewed/2025/06/GHSA-3xgx-5fr5-rcrq/GHSA-3xgx-5fr5-rcrq.json b/advisories/unreviewed/2025/06/GHSA-3xgx-5fr5-rcrq/GHSA-3xgx-5fr5-rcrq.json
new file mode 100644
index 00000000000..cdc20344722
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-3xgx-5fr5-rcrq/GHSA-3xgx-5fr5-rcrq.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3xgx-5fr5-rcrq",
+  "modified": "2025-06-09T06:30:23Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-5863"
+  ],
+  "details": "A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5863"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lavender-bicycle-a5a.notion.site/Tenda-AC5-formSetRebootTimer-20a53a41781f80a6b9a8f6e5915cf256?source=copy_link"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311622"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311622"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.591981"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenda.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-6vfc-8w2v-vx36/GHSA-6vfc-8w2v-vx36.json b/advisories/unreviewed/2025/06/GHSA-6vfc-8w2v-vx36/GHSA-6vfc-8w2v-vx36.json
new file mode 100644
index 00000000000..0d1186af1d4
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-6vfc-8w2v-vx36/GHSA-6vfc-8w2v-vx36.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6vfc-8w2v-vx36",
+  "modified": "2025-06-09T06:30:21Z",
+  "published": "2025-06-09T06:30:21Z",
+  "aliases": [
+    "CVE-2025-5862"
+  ],
+  "details": "A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5862"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lavender-bicycle-a5a.notion.site/Tenda-AC7-formSetPPTPUserList-20a53a41781f806ca124cbdf99bff931?source=copy_link"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311621"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311621"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.591980"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenda.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T05:15:21Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-796j-mc2v-jwpj/GHSA-796j-mc2v-jwpj.json b/advisories/unreviewed/2025/06/GHSA-796j-mc2v-jwpj/GHSA-796j-mc2v-jwpj.json
new file mode 100644
index 00000000000..9b5cc154188
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-796j-mc2v-jwpj/GHSA-796j-mc2v-jwpj.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-796j-mc2v-jwpj",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-3582"
+  ],
+  "details": "The Newsletter  WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3582"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/19db8521-8dff-48c5-b21a-1001895292e0"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-c8xj-fr2w-pjfc/GHSA-c8xj-fr2w-pjfc.json b/advisories/unreviewed/2025/06/GHSA-c8xj-fr2w-pjfc/GHSA-c8xj-fr2w-pjfc.json
new file mode 100644
index 00000000000..c05fb49486b
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-c8xj-fr2w-pjfc/GHSA-c8xj-fr2w-pjfc.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c8xj-fr2w-pjfc",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-47711"
+  ],
+  "details": "There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range, and a plugin responds with an even larger single block, the nbdkit server can encounter a critical internal error, leading to a denial-of-service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47711"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-47711"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2365687"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-193"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-f9xh-499r-w9qx/GHSA-f9xh-499r-w9qx.json b/advisories/unreviewed/2025/06/GHSA-f9xh-499r-w9qx/GHSA-f9xh-499r-w9qx.json
new file mode 100644
index 00000000000..a90ba87be44
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-f9xh-499r-w9qx/GHSA-f9xh-499r-w9qx.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f9xh-499r-w9qx",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-3581"
+  ],
+  "details": "The Newsletter  WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3581"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/2d96f018-510d-40ab-9e73-76fa44784813"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-fpfc-3gjg-hfhp/GHSA-fpfc-3gjg-hfhp.json b/advisories/unreviewed/2025/06/GHSA-fpfc-3gjg-hfhp/GHSA-fpfc-3gjg-hfhp.json
new file mode 100644
index 00000000000..10facd7ae3e
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-fpfc-3gjg-hfhp/GHSA-fpfc-3gjg-hfhp.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fpfc-3gjg-hfhp",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-47712"
+  ],
+  "details": "A flaw exists in the nbdkit \"blocksize\" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdkit, leading to a denial of service.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47712"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-47712"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2365724"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-r8xr-pgv5-gxw3/GHSA-r8xr-pgv5-gxw3.json b/advisories/unreviewed/2025/06/GHSA-r8xr-pgv5-gxw3/GHSA-r8xr-pgv5-gxw3.json
new file mode 100644
index 00000000000..1fbc1129687
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-r8xr-pgv5-gxw3/GHSA-r8xr-pgv5-gxw3.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r8xr-pgv5-gxw3",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:21Z",
+  "aliases": [
+    "CVE-2025-25207"
+  ],
+  "details": "The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with developer persona access can add a large number of those callbacks to be executed by Authorino and as the authentication policy is enforced by a single instance of the service, this leada to a Denial of Service in Authorino while processing the post-authorization callbacks.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25207"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-25207"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347421"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-rw8p-95qv-rmgj/GHSA-rw8p-95qv-rmgj.json b/advisories/unreviewed/2025/06/GHSA-rw8p-95qv-rmgj/GHSA-rw8p-95qv-rmgj.json
new file mode 100644
index 00000000000..83ab92beb9d
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-rw8p-95qv-rmgj/GHSA-rw8p-95qv-rmgj.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rw8p-95qv-rmgj",
+  "modified": "2025-06-09T06:30:21Z",
+  "published": "2025-06-09T06:30:21Z",
+  "aliases": [
+    "CVE-2025-5860"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in PHPGurukul Maid Hiring Management System 1.0. This affects an unknown part of the file /admin/search-booking-request.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5860"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/kakalalaww/CVE/issues/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311619"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311619"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.591910"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T04:15:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-vm2g-hvc6-gm5m/GHSA-vm2g-hvc6-gm5m.json b/advisories/unreviewed/2025/06/GHSA-vm2g-hvc6-gm5m/GHSA-vm2g-hvc6-gm5m.json
new file mode 100644
index 00000000000..f539265b574
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-vm2g-hvc6-gm5m/GHSA-vm2g-hvc6-gm5m.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vm2g-hvc6-gm5m",
+  "modified": "2025-06-09T06:30:23Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-5864"
+  ],
+  "details": "A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.7.15 is able to address this issue. It is recommended to upgrade the affected component.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5864"
+    },
+    {
+      "type": "WEB",
+      "url": "https://blog.kevgen.ru/posts/account_takeover_in_tdsee_app"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/k3vg3n/researches/blob/main/Account_takeover_in_TDSEE_app.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.592074"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenda.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-307"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:26Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-vmhw-cqjv-v26j/GHSA-vmhw-cqjv-v26j.json b/advisories/unreviewed/2025/06/GHSA-vmhw-cqjv-v26j/GHSA-vmhw-cqjv-v26j.json
new file mode 100644
index 00000000000..bff624ca3b3
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-vmhw-cqjv-v26j/GHSA-vmhw-cqjv-v26j.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vmhw-cqjv-v26j",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-25209"
+  ],
+  "details": "The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak those secrets over HTTP connection, as long the attacker knows the name of the targeted secrets and those secrets are limited to one line only.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25209"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-25209"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347438"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-vqvv-2wj5-q34w/GHSA-vqvv-2wj5-q34w.json b/advisories/unreviewed/2025/06/GHSA-vqvv-2wj5-q34w/GHSA-vqvv-2wj5-q34w.json
new file mode 100644
index 00000000000..06215e140d8
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-vqvv-2wj5-q34w/GHSA-vqvv-2wj5-q34w.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-vqvv-2wj5-q34w",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-25208"
+  ],
+  "details": "A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25208"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/security/cve/CVE-2025-25208"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2347436"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:24Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-w6g8-vwvh-5j95/GHSA-w6g8-vwvh-5j95.json b/advisories/unreviewed/2025/06/GHSA-w6g8-vwvh-5j95/GHSA-w6g8-vwvh-5j95.json
new file mode 100644
index 00000000000..9e7abc81c6c
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-w6g8-vwvh-5j95/GHSA-w6g8-vwvh-5j95.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w6g8-vwvh-5j95",
+  "modified": "2025-06-09T06:30:21Z",
+  "published": "2025-06-09T06:30:21Z",
+  "aliases": [
+    "CVE-2025-5859"
+  ],
+  "details": "A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /test-details.php. The manipulation of the argument assignto leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5859"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/f1rstb100d/myCVE/issues/65"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311605"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311605"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.591443"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T04:15:45Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-w6rq-5ggq-m372/GHSA-w6rq-5ggq-m372.json b/advisories/unreviewed/2025/06/GHSA-w6rq-5ggq-m372/GHSA-w6rq-5ggq-m372.json
new file mode 100644
index 00000000000..ee8f7aa7d5c
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-w6rq-5ggq-m372/GHSA-w6rq-5ggq-m372.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w6rq-5ggq-m372",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-4652"
+  ],
+  "details": "The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4652"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/2a18ab96-ba95-4599-824f-df12e4851e6d"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T06:15:25Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/06/GHSA-w866-3fpp-r6c4/GHSA-w866-3fpp-r6c4.json b/advisories/unreviewed/2025/06/GHSA-w866-3fpp-r6c4/GHSA-w866-3fpp-r6c4.json
new file mode 100644
index 00000000000..5ecd6ae534c
--- /dev/null
+++ b/advisories/unreviewed/2025/06/GHSA-w866-3fpp-r6c4/GHSA-w866-3fpp-r6c4.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-w866-3fpp-r6c4",
+  "modified": "2025-06-09T06:30:22Z",
+  "published": "2025-06-09T06:30:22Z",
+  "aliases": [
+    "CVE-2025-5861"
+  ],
+  "details": "A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5861"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lavender-bicycle-a5a.notion.site/Tenda-AC7-fromadvsetlanip-20a53a41781f80038f4fc4b9d927eb9a?source=copy_link"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.311620"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.311620"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.591960"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.tenda.com.cn"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-09T05:15:20Z"
+  }
+}
\ No newline at end of file