CERTFR-2025-ALE-007

creationtimestamp| type| source ---|---|--- 2025-05-14 11:27:31+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lp4vev6fp52t 2025-05-14 11:31:46+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lp4vmht6yb2f 2025-05-14 11:31:47+00:00| seen|...

DNS Query Forgery: a Client-Side Defense against Mobile App Traffic Profiling

Mobile applications continuously generate DNS queries that can reveal sensitive user behavioral patterns even when communications are encrypted. This paper presents a privacy enhancement framework based on query forgery to protect users against profiling attempts that leverage these background...

CVE-2025-40582

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16093 2025-05-13 10:48:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmzdsie42 2025-05-13 10:52:43+00:00| seen|...

CVE-2025-4502

creationtimestamp| type| source ---|---|--- 2025-05-10 14:27:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15896 2025-05-10 14:28:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bni5jbr2 2025-05-10...

CVE-2025-4500

creationtimestamp| type| source ---|---|--- 2025-05-10 13:27:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15894 2025-05-10 14:26:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5awmppo42 2025-05-10...

CVE-2025-4499

creationtimestamp| type| source ---|---|--- 2025-05-10 12:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15891 2025-05-10 14:26:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bccneaa2 2025-05-10...

CVE-2025-4486

creationtimestamp| type| source ---|---|--- 2025-05-09 22:01:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lor7jed4m4a2 2025-05-09 22:30:58+00:00| published-proof-of-concept| Telegram/-FSytdz-B3MQuFO8RZfSO4jPAWx-8JuShz-w-b65AWDPvJk...

CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-4454

creationtimestamp| type| source ---|---|--- 2025-05-09 02:25:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15653 2025-05-09 06:10:37+00:00| seen| https://t.me/cvedetector/24897 2025-05-09 06:17:49+00:00| seen|...

CVE-2025-4446

creationtimestamp| type| source ---|---|--- 2025-05-09 00:24:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15645 2025-05-09 00:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lop6wvn6lk2p 2025-05-09 01:14:59+00:00| seen|...

The vulnerability of the Message routing profiles component of the BIG-IP access control and remote authentication solution allows a perpetrator to cause a service failure.

The vulnerability of the Message routing profiles component in the access control and remote authentication solution BIG-IP is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

An Agent-Based Modeling Approach to Free-Text Keyboard Dynamics for Continuous Authentication

Continuous authentication systems leveraging free-text keyboard dynamics offer a promising additional layer of security in a multifactor authentication setup that can be used in a transparent way with no impact on user experience. This study investigates the efficacy of behavioral biometrics by...

CVE-2025-31177

creationtimestamp| type| source ---|---|--- 2025-05-07 21:08:17+00:00| seen| https://bsky.app/profile/potato.software/post/3lomckwmwph24 2025-05-07 21:22:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15441 2025-05-07 21:25:56+00:00| seen|...

CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-20966

CVE-2025-20966 affects Samsung Gallery; vulnerable is improper access control in versions: Global Android 13 ≤ 14.5.10.3, China Android 13 ≤ 14.5.09.3, and Android 14 ≤ 15.5.04.5. Root cause: improper access control enabling cross-profile data access by physical attackers. Impact: exposure of dat...

CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-20966: Undefined Security Weakness

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

PT-2025-20051 · Samsung · Samsung Gallery

Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery version 14.5.09.3 in China Android 13 Samsung Gallery version 15.5.04.5 in Android 14 Description: The issue is related to improper access control in Samsung...

CVE-2025-46736

creationtimestamp| type| source ---|---|--- 2025-05-06 17:21:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15163 2025-05-06 18:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis7nmx22j 2025-05-06 19:20:02+00:00| seen|...