CVE-2019-9292

In the Activity Manager service, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of current foreground process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions:...

CVE-2019-5682

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but does not properly restrict which applications can launch the Activity, which may lead to code execution or denial of service...

CVE-2016-10890

The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...

CVE-2018-9461

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

GHSA-P7RR-28XF-3M5W

creationtimestamp| type| source ---|---|--- 2025-05-21 18:17:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114547193543047342...

CVE-2025-37899

creationtimestamp| type| source ---|---|--- 2025-05-21 08:47:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17104 2025-05-22 11:21:06+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lpqyqrgb452s 2025-05-22 11:21:41+00:00| seen|...

CVE-2025-5000

creationtimestamp| type| source ---|---|--- 2025-05-20 21:16:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmz2junysa2 2025-05-20 23:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mr7trt2p...

GHSA-HJQ4-87XH-G4FV

creationtimestamp| type| source ---|---|--- 2025-05-20 17:43:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17023 2025-05-20 18:44:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114541634791270960...

CVE-2025-30193

creationtimestamp| type| source ---|---|--- 2025-05-20 11:18:38+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxoi5dlk2e 2025-05-20 11:18:55+00:00| seen| https://bsky.app/profile/powerdns.bsky.social/post/3lplxozplrk2e 2025-05-20 11:40:19+00:00| seen|...

AutomationDirect MB-Gateway

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

ABUP IoT Cloud Platform

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

CVE-2025-3079

creationtimestamp| type| source ---|---|--- 2025-05-20 00:10:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpksd26u73v2 2025-05-20 00:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpku6jj7o32j...

CVE-2025-4929

creationtimestamp| type| source ---|---|--- 2025-05-19 11:44:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjin6b6pym2 2025-05-19 13:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnkfbgr24...

CVE-2025-4945

A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software. The vulnerability arises when processing the expiration date of cookies, where a specially crafted value can trigger an integer overflow. This may result in undefined behavior,...

Malicious code in moonpay-sign (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b5de9ec184be265177d407487382fe8b9fb3b0a9b975b1d2570a06d6c054c70 Any computer that has this package installed or running should be considered...

CVE-2025-4890

creationtimestamp| type| source ---|---|--- 2025-05-18 19:04:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16769 2025-05-18 19:24:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphrv5p7gvy2 2025-05-18...

CVE-2025-4891

creationtimestamp| type| source ---|---|--- 2025-05-18 19:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16768 2025-05-18 19:24:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphruxtfqxe2 2025-05-18...

CVE-2025-4886

creationtimestamp| type| source ---|---|--- 2025-05-18 16:54:22+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lphjibz76cc2 2025-05-18 17:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lphkjyigtg2e...