CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20924

CVE-2025-20924 affects Samsung Notes prior to version 4.4.26.71. The issue is an improper access control bug that allows a physical attacker to access data across multiple user profiles on affected devices. Root cause is access-control failure within Samsung Notes’ multi-profile handling, enablin...

SUSE CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

Samsung Notes 安全漏洞

Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...

CVE-2025-1515

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6522 2025-03-05 11:00:40+00:00| seen| Telegram/0Yqtjw9YH6-bbPYOOOdcDrS2V3-Mk62rGjDskGptkEdbLqw 2025-03-05 11:49:56+00:00| seen|...

CVE-2025-27680

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6491 2025-03-05 08:34:35+00:00| seen| https://t.me/cvedetector/19585 2025-03-05 09:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuugtel2s 2025-03-06...

CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-22870

creationtimestamp| type| source ---|---|--- 2025-03-04 20:44:04+00:00| seen| https://bsky.app/profile/go-perf.bsky.social/post/3ljldeoic6c2f 2025-03-07 18:52:42+00:00| seen| https://gist.github.com/EbonJaeger/d4b1234a40aa00f5181603a97fda735a 2025-03-07 20:29:35+00:00| seen|...

CVE-2024-55532

creationtimestamp| type| source ---|---|--- 2025-03-03 16:10:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ljidmis4fp2c 2025-03-03 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hf6la2i 2025-03-11 03:12:44+00:00| seen|...

ASB-A-376259166

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47051

creationtimestamp| type| source ---|---|--- 2025-02-26 09:44:35+00:00| seen| https://bsky.app/profile/druid.fi/post/3lj33ptmzfc2z 2025-02-26 12:31:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5484 2025-02-26 19:49:10+00:00| seen|...

CVE-2024-0148

creationtimestamp| type| source ---|---|--- 2025-02-25 20:22:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5366 2025-02-25 23:14:20+00:00| seen| https://t.me/cvedetector/18920 2025-02-27 06:26:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b52ojj32q 2025-02-27...

February 25, 2025—KB5052077 (OS Build 19045.5555) Preview

None None...

CVE-2025-27276

creationtimestamp| type| source ---|---|--- 2025-02-24 17:48:29+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114060119802420695 2025-02-24 19:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5mkuv2g...

CERTFR-2025-ACT-008

creationtimestamp| type| source ---|---|--- 2025-02-24 14:29:43+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114059338188078617 2025-02-24 15:20:23+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3liwnkkioxa2g 2025-03-10 13:12:34+00:00| seen|...

CVE-2025-24490

creationtimestamp| type| source ---|---|--- 2025-02-24 09:30:39+00:00| seen| Telegram/Vvd5MA2nmu0duCxF3bbKYEKWTKbzMFIp2pUAfan9WmCtw 2025-02-24 09:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114058233176053982 2025-02-24 10:26:03+00:00| seen|...

CVE-2024-12038

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyformsnav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper authorization checks on the Host parameter. An attacker can view profile information of other users by manipulating the Host parameter. Remediation Upgrade leantime/leantime to version 3.3 or higher...