Malicious code in elf-stats-nutmeg-cocoa-967 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec53b5235707d735ff1bece95ce8c4e95266aca2f088ceb1460b2c686ca4616d The package elf-stats-nutmeg-cocoa-967 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-starlit-ribbon-255 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab737733063151f587ed67c238187c2c8832c3a5bead8f0140d93e58143a9742 The package elf-stats-starlit-ribbon-255 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-mulled-bauble-252 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b496322bb576fe2d9c78c8c2982cbbea3a84587c945d2f580c242e2256b0ef69 The package elf-stats-mulled-bauble-252 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191985 Malicious code in elf-stats-shimmering-lantern-668 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0bf489feb2d390c8580fca8ed4a6840dd7b673f7b427c7644e0004854dd8d3 The package elf-stats-shimmering-lantern-668 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-191981 Malicious code in elf-stats-frosty-candy-393 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9995d6c66e999d598020c6fa5202b69c01b763a586129b2190e99153e479047 The package elf-stats-frosty-candy-393 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-sparkly-garland-970 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b40bdf891b2ad849d25f291b27e11a9c8dcae571ad90c75ee7d7f0696e248 The package elf-stats-sparkly-garland-970 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

Malicious code in karemm3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd722766b62cd6170d4f383859a06e6a2a680b4a27dfad18580d867812e57c0 The package karemm3 was found to contain malicious code. Source: ossf-package-analysis f604c8fe5fbfae97b812b063b2707f681c1499484e959e7229a06227b1607b...

CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

EUVD-2025-200131

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

CVE-2025-58487

The advisory concerns Samsung Account, where an improper authorization flaw before version 15.5.01.1 could let a local attacker launch arbitrary activities under Samsung Account privileges. The issue, described consistently across multiple feeds (NVD, Red Hat, CVE lists, regional advisories), is ...

CVE-2025-58487

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

PT-2025-48605

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 15.5.01.1 Description An improper authorization issue exists in Samsung Account. This allows a local attacker to launch arbitrary activity with Samsung Account privileges. Recommendations Update Samsung Accoun...

CVE-2025-58487: Undefined Security Weakness

Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege...

CERTFR-2025-ACT-052

creationtimestamp| type| source ---|---|--- 2025-12-01 13:24:26+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m6wjmyxrdx2w 2025-12-01 13:24:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115644528440908877 2025-12-01 13:39:09+00:00| seen|...

ASB-A-289809991

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege and background activity launch with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-49015

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. This issue may allow an attacker to elevate their privileges. The issue resides...

ASB-A-376461726

In notifyTimeout of CallRedirectionProcessor.java, there is a possible persistent connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for exploitation...