MAL-2025-191688 Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

Malicious code in axonify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 22991c04631c7553b040a72573bc7d0ad80886ab6bc834ac43f1e1611f85ea02 The package is capable of installing malware from a hardcoded URL. The malware is well-recognized and acts as infostealer. Interestingly, it uses Steam profile...

power-profiles-daemon bug fix and enhancement update

An update is available for power-profiles-daemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

CVE-2025-1734

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26 2025-03-17 12:32:28+00:00| seen|...

Samsung Notes Access Control Error Vulnerability

Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...

The vulnerability of the Profiles component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Profiles component in Google Chrome browser relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a specially created HTML page...

CVE-2025-25292

creationtimestamp| type| source ---|---|--- 2025-03-12 20:07:18+00:00| seen| https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/ 2025-03-12 21:40:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7388 2025-03-13...

CVE-2025-20115

creationtimestamp| type| source ---|---|--- 2025-03-12 17:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114150716852953937 2025-03-12 19:03:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114151010071305070 2025-03-12 20:23:16+00:00| seen|...

CVE-2025-24801

creationtimestamp| type| source ---|---|--- 2025-03-12 10:58:14+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lk6geieskt2j 2025-03-12 11:30:36+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lk6i6evc3a2c 2025-03-12 12:09:32+00:00| seen|...

CVE-2025-24076

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-31 02:31:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9584 2025-04-15 09:00:16+00:00| seen|...

CVE-2025-24991

creationtimestamp| type| source ---|---|--- 2025-03-11 16:39:36+00:00| seen| https://www.thezdi.com/blog/2025/3/11/the-march-2025-security-update-review 2025-03-11 17:09:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144902283889820 2025-03-11 17:39:50+00:00| seen|...

CVE-2024-52961

creationtimestamp| type| source ---|---|--- 2025-03-11 15:48:25+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114144582151960068 2025-03-11 15:48:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144582323119479 2025-03-11 17:37:45+00:00| seen|...

CVE-2024-13918

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6989 2025-03-10 11:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxmaoz2h 2025-03-10 11:48:30+00:00| seen|...

CVE-2024-13919

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6988 2025-03-10 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114137976660008505 2025-03-10 12:20:52+00:00| seen|...

Google Chrome Profiles Memory Misreference Code Execution Vulnerability

Google Chrome is a WEB browser developed by Google Inc. A memory misreference code execution vulnerability exists in Google Chrome Profiles, which can be exploited by an attacker to submit a special Web request and trick the user into parsing it, which can crash the application or execute arbitra...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2024-50394

creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6862 2025-03-07 20:48:04+00:00| seen| https://t.me/cvedetector/19848 2025-03-09 03:10:12+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljw2sqno7k27 2025-03-09...

CVE-2025-21835

creationtimestamp| type| source ---|---|--- 2025-03-07 12:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4illc2f 2025-03-07 12:07:05+00:00| seen| https://bsky.app/profile/potato.software/post/3ljrxuybpw32n 2025-03-07 12:25:52+00:00| seen| https://t.me/cvedetector/19811...

CVE-2024-56195

creationtimestamp| type| source ---|---|--- 2025-03-06 11:39:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6661 2025-03-06 14:14:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114115902257488846 2025-03-06 15:30:40+00:00| seen| https://t.me/cvedetector/19698 2025-03-06...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...