CVE-2025-5578

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can ...

CVE-2025-5579

CVE-2025-5579 affects PHPGurukul Dairy Farm Shop Management System 1.3. the vulnerability is in the /search-product.php file, where manipulating the productname parameter leads to an SQL injection. Descriptions across multiple sources confirm remote exploitation possibilities and public disclosur...

CVE-2025-27444

The RSform!Pro component (versions 3.0.0 - 3.3.13 ) for Joomla contains a reflected XSS vulnerability. The root cause is the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped within the administrative backend interface. An authenticated attacker with admin or e...

CVE-2025-20992

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3svs36vb2 2025-06-04 06:46:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr7h6wmhv25...

CVE-2025-20991

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sbh24eb2 2025-06-04 06:41:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqr777m6lr2e...

CVE-2025-20995

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files...

CVE-2025-20995

Summary: Samsung Internet prior to 28.0.0.59 has an authorization issue in the ClientProvider component that mishandles privilege insufficiency, enabling local attackers on non-Samsung devices to read and write arbitrary files. What’s affected: Samsung Internet versions before 28.0.0.59; vulnerab...

CVE-2025-20991

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable...

CVE-2025-20988

The CVE-2025-20988 issue is a local, out-of-bounds read in the Samsung fingerprint trustlet present in Samsung Mobile devices prior to SMR May-2025 Release 1. The root cause is an out-of-bounds access in the fingerprint trustlet, allowing a locally privileged attacker to read memory outside the i...

CVE-2025-20988

Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory...

CVE-2025-20987

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a authtoken...

CVE-2025-20986

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...

CVE-2025-20981

Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-5399

creationtimestamp| type| source ---|---|--- 2025-06-04 03:48:34+00:00| seen| https://daniel.haxx.se/blog/2025/06/04/curl-8-14-1/ 2025-06-04 03:55:03+00:00| seen| https://seclists.org/oss-sec/2025/q2/208 2025-06-04 05:53:55+00:00| seen|...

CVE-2025-5532

The CVE-2025-5532 issue affects the Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress. It is a Stored Cross-Site Scripting vulnerability in the emd_mb_meta shortcode, present in all versions up to 1.9.0. Exploitation requires authenticated access at contributor level or h...

CVE-2025-20675

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302...

CVE-2025-20676

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293...

CVE-2025-5552

creationtimestamp| type| source ---|---|--- 2025-06-04 02:46:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqryilcl352...

CVE-2025-49223

creationtimestamp| type| source ---|---|--- 2025-06-04 02:45:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqryct2mia2 2025-06-04 09:10:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/39216 2025-06-04 15:00:07+00:00...

CVE-2025-5548

creationtimestamp| type| source ---|---|--- 2025-06-04 01:23:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqnayud43n2 2025-06-04 01:31:30+00:00| published-proof-of-concept| Telegram/zUVTgXvzkwLEqz2FR1DEMSQdpoQl8zaI1Yp9yK0vMGoKWE...