CVE-2025-20970

Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15 allows local attackers to access image files with Bixby Vision privilege...

PT-2025-20051 · Samsung · Samsung Gallery

Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery version 14.5.09.3 in China Android 13 Samsung Gallery version 15.5.04.5 in Android 14 Description: The issue is related to improper access control in Samsung...

RockyLinux 8 : postgresql:13 (RLSA-2024:6018)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:6018 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...

PT-2025-20055 · Samsung · Bixby Vision

Name of the Vulnerable Software and Affected Versions: Bixby Vision versions prior to 3.8.1 in Android 13 Bixby Vision versions prior to 3.8.3 in Android 14 Bixby Vision versions prior to 3.8.21 in Android 15 Description: The issue is related to improper access control in Bixby Vision, allowing...

PT-2025-20058 · Samsung +1 · Secure Folder +2

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to 1.8.12.0 in Android 13 Secure Folder versions prior to 1.9.21.00 in Android 14 Description: The issue is related to improper authentication in Secure Folder, allowing physical attackers to reset the lock type...

CVE-2024-49844

creationtimestamp| type| source ---|---|--- 2025-05-06 12:48:37+00:00| seen| https://t.me/cvedetector/24584 2025-05-06 13:20:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15106...

CVE-2024-3446

creationtimestamp| type| source ---|---|--- 2025-05-02 23:17:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14626 2025-09-12 22:13:53+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyobvxu5h22i...

Exploit for Deserialization of Untrusted Data in Google Android

CVE-2024-31317-PoC-Deployer!Android Versionhttps://img.shie...

CVE-2022-42110

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14136...

CVE-2022-32267

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14123...

CVE-2022-34318

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14060...

CVE-2022-34316

creationtimestamp| type| source ---|---|--- 2025-04-30 15:13:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14055...

CVE-2025-22037

creationtimestamp| type| source ---|---|--- 2025-04-30 10:13:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14000 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0289/ 2026-03-19 00:00:00+00:00| seen|...

Debian: Security Advisory (DLA-4143-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-3285 Malicious code in discord.js-selfbot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab72c09e960ea50f08197c72eb549889779b0936abc22064b5adc5d2600361a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 Android 13 Local Privilege Escalation

Android version 13 local privilege escalation proof of concept exploit. Exploit Title: Android 13 - Local Privilege Escalation Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Version: = 13 Tested on: Win,...

CVE-2022-3961

creationtimestamp| type| source ---|---|--- 2025-04-17 13:57:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12221...

AZL-60604 CVE-2025-22872 affecting package packer for versions less than 1.9.5-13

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

CVE-2025-1274

creationtimestamp| type| source ---|---|--- 2025-04-16 13:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12047...

CVE-2025-30740

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11908 2025-08-09 13:26:57+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27 2025-08-11 18:47:41+00:00| seen| MISP/abd2a650-703d-4a2f-9f73-3051c1672e27...