23414 matches found
CVE-2025-64786
creationtimestamp| type| source ---|---|--- 2025-12-09 23:10:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lo3shwvp2c 2025-12-10 13:40:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6pzrvlz2m...
CVE-2021-47710
creationtimestamp| type| source ---|---|--- 2025-12-09 21:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ljni5dct2q 2025-12-10 08:08:53+00:00| seen| https://gist.github.com/Darkcrai86/7507fb447def01b4412309e45e1fcf87...
CVE-2025-66456
creationtimestamp| type| source ---|---|--- 2025-12-09 21:45:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ljejp7nr2n 2025-12-11 15:42:04+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m7pvybzu7b2d...
EUVD-2025-202319
A stored Cross-Site Scripting XSS vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 2025-10-28 in the Account Settings module, where unsanitized user input in Address fields City, State, Country/Region is rendered back to the page. Attackers can inject arbitrary JavaScript...
CVE-2025-64894
creationtimestamp| type| source ---|---|--- 2025-12-09 20:18:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lei34xur2k...
CVE-2025-65594
creationtimestamp| type| source ---|---|--- 2025-12-09 19:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ldebeq6o2u...
CVE-2025-40800
creationtimestamp| type| source ---|---|--- 2025-12-09 19:32:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lbwdfybm2s 2025-12-11 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-04 2025-12-13 16:44:49+00:00| seen|...
CVE-2025-14310
creationtimestamp| type| source ---|---|--- 2025-12-09 19:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lbneycch2n...
CVE-2025-40830
creationtimestamp| type| source ---|---|--- 2025-12-09 19:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7labv5y322x...
CVE-2025-10573
creationtimestamp| type| source ---|---|--- 2025-12-09 17:32:08+00:00| seen| https://bsky.app/profile/rapid7.com/post/3m7l376phks2e 2025-12-09 20:00:36+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3m7ldipcpad2b 2025-12-10 06:03:01+00:00| seen|...
CVE-2025-64667
creationtimestamp| type| source ---|---|--- 2025-12-09 17:29:16+00:00| seen| https://www.thezdi.com/blog/2025/12/9/the-december-2025-security-update-review 2025-12-09 19:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lcmtsz242b 2025-12-10 13:35:05+00:00| seen|...
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48612
In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2025-48565
In multiple locations, there is a possible way to bypass the cross profile intent filter due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48566
In multiple locations, there is a possible bypass of user profile boundary with a forwarded intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48586
In onActivityResult of EditFdnContactScreen.java, there is a possible way to leak contacts from the work profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48555
In multiple functions of NotificationStation.java, there is a possible cross-profile information disclosure due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-14329
creationtimestamp| type| source ---|---|--- 2025-12-09 15:47:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kvewt3y726 2025-12-10 00:01:32+00:00| seen| https://bsky.app/profile/slackers.it/post/3m7lqxld6tj27 2025-12-10 13:40:20+00:00| seen|...