CVE-2024-56195

creationtimestamp| type| source ---|---|--- 2025-03-06 11:39:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6661 2025-03-06 14:14:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114115902257488846 2025-03-06 15:30:40+00:00| seen| https://t.me/cvedetector/19698 2025-03-06...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

CVE-2025-20924 affects Samsung Notes prior to version 4.4.26.71. The issue is an improper access control bug that allows a physical attacker to access data across multiple user profiles on affected devices. Root cause is access-control failure within Samsung Notes’ multi-profile handling, enablin...

SUSE CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-20924: Undefined Security Weakness

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

Samsung Notes 安全漏洞

Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...

CVE-2025-1515

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6522 2025-03-05 11:00:40+00:00| seen| Telegram/0Yqtjw9YH6-bbPYOOOdcDrS2V3-Mk62rGjDskGptkEdbLqw 2025-03-05 11:49:56+00:00| seen|...

CVE-2025-27680

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6491 2025-03-05 08:34:35+00:00| seen| https://t.me/cvedetector/19585 2025-03-05 09:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuugtel2s 2025-03-06...

CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1916: Use After Free

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CSRF vulnerability

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not require POST requests for the HTTP endpoint toggling collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability...

CVE-2025-22870

creationtimestamp| type| source ---|---|--- 2025-03-04 20:44:04+00:00| seen| https://bsky.app/profile/go-perf.bsky.social/post/3ljldeoic6c2f 2025-03-07 18:52:42+00:00| seen| https://gist.github.com/EbonJaeger/d4b1234a40aa00f5181603a97fda735a 2025-03-07 20:29:35+00:00| seen|...

CVE-2024-55532

creationtimestamp| type| source ---|---|--- 2025-03-03 16:10:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ljidmis4fp2c 2025-03-03 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hf6la2i 2025-03-11 03:12:44+00:00| seen|...

CVE-2025-26999: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Object Injection.This issue affects ProfileGrid : from n/a through = 5.9.4.3...

ASB-A-376259166

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47051

creationtimestamp| type| source ---|---|--- 2025-02-26 09:44:35+00:00| seen| https://bsky.app/profile/druid.fi/post/3lj33ptmzfc2z 2025-02-26 12:31:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5484 2025-02-26 19:49:10+00:00| seen|...