CVE-2025-1246

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operation...

CVE-2025-48955

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require...

CVE-2025-5583

creationtimestamp| type| source ---|---|--- 2025-06-04 10:30:21+00:00| published-proof-of-concept| Telegram/bLjrC9tPzCCzqBV9tPPk4RjX5hk6xn56Rb8xcYftwOmz04 2025-06-04 10:57:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrnitg2nwg2...

CVE-2025-5584

CVE-2025-5584 affects PHPGurukul Hospital Management System 4.0. The vulnerability is in the POST Parameter Handler for /doctor/edit-patient.php?editid=2, where manipulating the patname parameter triggers cross-site scripting. Remote exploitation is possible and exploits have been disclosed publi...

CVE-2025-5582

creationtimestamp| type| source ---|---|--- 2025-06-04 09:26:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqriepy5ywb2 2025-06-04 13:15:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrv6yoxag2a...

CVE-2025-47724

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 10:38:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrmfrrd252e 2025-06-24 10:00:00+00:00| seen|...

CVE-2025-5579

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 09:26:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrifbjqqnv2...

CVE-2025-47728

creationtimestamp| type| source ---|---|--- 2025-06-04 08:33:57+00:00| seen| Telegram/rzYr6oSh9PAauXcQEyfoiM17XavJOamHeAHzlIt-IhTrU 2025-06-04 09:26:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqriesyzhwv2 2025-06-04 10:54:29+00:00...

CVE-2025-5578

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can ...

CVE-2025-5579

CVE-2025-5579 affects PHPGurukul Dairy Farm Shop Management System 1.3. the vulnerability is in the /search-product.php file, where manipulating the productname parameter leads to an SQL injection. Descriptions across multiple sources confirm remote exploitation possibilities and public disclosur...

CVE-2025-27444

CVE-2025-27444 affects RSform!Pro (Joomla) 3.0.0–3.3.13. Root cause: improper handling of the filter[dateFrom] GET parameter leads to reflected XSS in the administrative backend when an authenticated admin/editor clicks a crafted URL. Impact: potential injection of arbitrary JavaScript in the adm...

CVE-2025-20992

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3svs36vb2 2025-06-04 06:46:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr7h6wmhv25...

CVE-2025-20991

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sbh24eb2 2025-06-04 06:41:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr777m6lr2e...

CVE-2025-20995

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files...

CVE-2025-20995

Summary: Samsung Internet prior to 28.0.0.59 has an authorization issue in the ClientProvider component that mishandles privilege insufficiency, enabling local attackers on non-Samsung devices to read and write arbitrary files. What’s affected: Samsung Internet versions before 28.0.0.59; vulnerab...

CVE-2025-20991

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...

CVE-2025-20988

The CVE-2025-20988 issue is a local, out-of-bounds read in the Samsung fingerprint trustlet present in Samsung Mobile devices prior to SMR May-2025 Release 1. The root cause is an out-of-bounds access in the fingerprint trustlet, allowing a locally privileged attacker to read memory outside the i...

CVE-2025-20988

Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory...

CVE-2025-20987

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a authtoken...

CVE-2025-20986

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...