23691 matches found
CVE-2025-21004
The CVE-2025-21004 entry concerns Galaxy Watch System UI where improper verification of intents in the broadcast receiver enables a local attacker to power off the device. Affected scope is Galaxy Watch devices running firmware prior to the SMR Jul-2025 Release 1. The underlying issue is insuffic...
CVE-2025-20999
The CVE-2025-20999 issue affects Samsung Galaxy Tablet devices (prior to SMR Jul-2025 Release 1) and is due to improper authorization when accessing saved Wi‑Fi passwords, enabling a secondary user to retrieve the owner’s credentials. The root cause is insufficient access control for saved Wi‑Fi ...
CVE-2025-20982
The issue (CVE-2025-20982) affects KnoxVault trustlet on Samsung devices, caused by an out-of-bounds write when setting the auth secret. It applies to KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 and enables local privileged attackers to write memory out-of-bounds. Mitigation: upda...
CVE-2025-50109
creationtimestamp| type| source ---|---|--- 2025-07-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 2025-07-08 20:03:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lti3tu3ut324...
CVE-2025-7169
creationtimestamp| type| source ---|---|--- 2025-07-08 09:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgycjr7g32e...
CVE-2025-38236
A use-after-free flaw was found in the Linux kernel's AFUNIX sockets functionality in how a user triggers the issue by sending and receiving a crafted sequence of OOB socket messages. This vulnerability allows a local attacker to escalate privileges, especially if the kernel address layout...
CVE-2025-24006
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root...
CVE-2025-41668
creationtimestamp| type| source ---|---|--- 2025-07-08 07:11:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816362788303261 2025-07-08 07:11:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqovnswf72 2025-07-08 09:32:32+00:00| seen|...
CVE-2018-18384
creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...
CVE-2018-20969
creationtimestamp| type| source ---|---|--- 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08 07:10:49+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2...
CVE-2025-7346
CVE-2025-7346 affects pyload’s web UI (cnl_blueprint.py) where a local_check middleware validates requests based on REMOTE_ADDR and Host header. An unauthenticated attacker can bypass localhost restrictions by setting Host to 127.0.0.1:9666 or localhost variants, enabling actions like adding arbi...
CVE-2025-20691
creationtimestamp| type| source ---|---|--- 2025-07-08 06:57:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgpxae3u62b...
CVE-2025-42969
creationtimestamp| type| source ---|---|--- 2025-07-08 03:20:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgdsnyxdz2e...
CVE-2025-7295
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-544/ 2025-07-22 03:54:23+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:38+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...
CVE-2025-7244
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-497/...
CVE-2025-7275
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-522/ 2025-09-09 20:56:44+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-7307
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-554/...
CVE-2025-7257
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-503/...