CVE-2025-5715 Signal App Biometric Authentication missing critical step in authentication

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5707

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw445j4rn2k...

CVE-2025-48133

creationtimestamp| type| source ---|---|--- 2025-06-06 00:47:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmdajbur2e...

Signal App 安全漏洞

Signal App is an end-to-end encrypted secure messaging platform from Signal USA. A security vulnerability exists in Signal App version 7.41.4, which stems from a missing critical authentication step in the component Biometric Authentication Handler...

PT-2025-24006 · Signal · Signal App

Name of the Vulnerable Software and Affected Versions: Signal App version 7.41.4 Description: A vulnerability was found in the Biometric Authentication Handler component, which affects the authentication process by missing a critical step. The attack can be launched on a physical device and has a...

CVE-2025-5677

creationtimestamp| type| source ---|---|--- 2025-06-05 20:30:44+00:00| published-proof-of-concept| Telegram/RAuR4LLNmn1CnkWaHAzYQYeG8hMJgMyoggU9ALosiP524 2025-06-06 01:17:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnzi3vek2r...

CVE-2025-49009

creationtimestamp| type| source ---|---|--- 2025-06-05 19:19:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquzyjhxki2s...

Unsecured Database Exposes Data of 3.6 Million Passion.io Creators

A massive data leak has put the personal information of over 3.6 million app creators, influencers, and entrepreneurs…...

CVE-2025-27445

creationtimestamp| type| source ---|---|--- 2025-06-05 13:49:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lquhlgrb3xi2 2025-06-05 14:31:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114631238055243276 2025-06-18...

CVE-2025-5575

creationtimestamp| type| source ---|---|--- 2025-06-04 07:30:39+00:00| published-proof-of-concept| Telegram/0C4H1-9p6rhhkzClfhyA9efZ8JNoRql5IFgGY-PSQg7BbWM 2025-06-04 10:49:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrn26scwb2a...

CVE-2025-48710

creationtimestamp| type| source ---|---|--- 2025-06-04 06:57:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqra3vvu272s...

CVE-2025-4580

creationtimestamp| type| source ---|---|--- 2025-06-04 06:51:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr7qks4bi2q...

CVE-2025-5561

creationtimestamp| type| source ---|---|--- 2025-06-04 05:31:01+00:00| published-proof-of-concept| Telegram/cnVAOOWMYuq0gJ34DyryFWOqNRFlzTWq3mhqJOrHXjUqQ 2025-06-04 07:05:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrakci44t2e...

CVE-2025-5543

creationtimestamp| type| source ---|---|--- 2025-06-04 02:32:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqrbsve4q2e...

Newly published App-V applications are not visible to end users

After most recent upgrade of Web Studio users are not able to see newly published App-V packages/applications. This issue affects only newly published App-V applications...

CVE-2025-23100

creationtimestamp| type| source ---|---|--- 2025-06-03 21:36:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqqaqaxmy32a...

CVE-2025-5510

creationtimestamp| type| source ---|---|--- 2025-06-03 18:53:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpxmbau6v2e...

Incorrect Implementation of Authentication Algorithm

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm. due to the improper invalidation of personal access tokens. An attacker can maintain access...

CVE-2025-30360

creationtimestamp| type| source ---|---|--- 2025-06-03 15:55:19+00:00| published-proof-of-concept| https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-9jgg-88mc-972h 2025-06-03 18:11:11+00:00| seen|...

CVE-2025-46206

creationtimestamp| type| source ---|---|--- 2025-06-03 11:00:08+00:00| published-proof-of-concept| Telegram/AVcP4NaAVoAIaI4JZ8722BzyGCBMKTxXAkeHop-I5vQFCI 2025-08-04 21:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6iai6xo2p 2025-08-06 21:02:30+00:00| seen|...