CVE-2025-24971 OS Command Injection endpoint '/upload/init' parameter 'filename' (RCE) in DumpDrop

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

CVE-2025-23645

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedzo4dwy27 2025-02-04 18:54:27+00:00| seen| https://t.me/cvedetector/17210...

CVE-2025-0825

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedyem53k2t...

CVE-2025-20888

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjufjk32t...

CVE-2025-20884

creationtimestamp| type| source ---|---|--- 2025-02-04 08:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmjkakj327 2025-02-04 10:32:49+00:00| seen| https://t.me/cvedetector/17175 2025-02-14 10:05:00+00:00| seen|...

CVE-2025-20906

Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to enable ADB...

CVE-2025-20889

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

CVE-2024-10239

creationtimestamp| type| source ---|---|--- 2025-02-04 08:09:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113944595962559024 2025-02-04 08:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj2urnn2f 2025-02-06 02:40:47+00:00| seen|...

CVE-2025-20895

The CVE-2025-20895 affects Samsung Galaxy Store prior to 4.5.87.6. The issue permits authentication bypass via an alternate path in Galaxy Store, enabling a physical attacker to install arbitrary apps and bypass Setupwizard restrictions. Affected: Galaxy Store versions before 4.5.87.6. Root cause...

CVE-2025-20883

CVE-2025-20883 concerns an improper access control flaw in the Samsung SoundPicker component prior to SMR Jan‑2025 Release 1. The root cause is improper access control that allows a physical attacker to access data across multiple user profiles on a device. Reported impact is exposure of data fro...

CVE-2025-24964

creationtimestamp| type| source ---|---|--- 2025-02-04 06:23:12+00:00| published-proof-of-concept| https://github.com/vitest-dev/vitest/security/advisories/GHSA-9crc-q9x8-hgqq 2025-02-04 20:16:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lheur5xdj327 2025-02-04...

CVE-2024-13330

creationtimestamp| type| source ---|---|--- 2025-02-04 06:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdfsz3t322i 2025-02-04 06:28:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113944198729165110 2025-02-04 08:02:11+00:00| seen|...

CVE-2024-13326

creationtimestamp| type| source ---|---|--- 2025-02-04 06:08:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113944121195446860 2025-02-04 06:13:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113944139662774431 2025-02-04 06:16:01+00:00| seen|...

CVE-2025-1003

creationtimestamp| type| source ---|---|--- 2025-02-04 00:06:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113942696577664891 2025-02-04 00:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcromy62m2b 2025-02-04 02:11:21+00:00| seen|...

Important: gstreamer1-plugins-base

Issue Overview: GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, t...

CVE-2025-24958

creationtimestamp| type| source ---|---|--- 2025-02-03 22:04:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113942216479395985 2025-02-03 22:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckz5gqx22w 2025-02-03 23:40:43+00:00| seen|...

GHSA-R57H-547H-W24F

creationtimestamp| type| source ---|---|--- 2025-02-03 21:24:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113942059711678817...

CVE-2025-24962

creationtimestamp| type| source ---|---|--- 2025-02-03 21:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchnflh6r2c 2025-02-03 21:34:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113942099845540529 2025-02-03 22:08:27+00:00| seen|...

CVE-2025-24961

creationtimestamp| type| source ---|---|--- 2025-02-03 20:34:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113941862621519300 2025-02-03 21:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchnd7gwh2f 2025-02-03 22:08:29+00:00| seen|...

CVE-2024-57450

creationtimestamp| type| source ---|---|--- 2025-02-03 20:07:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113941758534982692 2025-02-03 20:16:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecrtucp2f 2025-02-03 22:00:04+00:00| seen|...