CVE-2025-9613

creationtimestamp| type| source ---|---|--- 2025-12-09 19:28:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115691259941175400 2025-12-09 19:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ld3ady272k 2025-12-10 13:40:26+00:00| seen|...

CVE-2025-10573

creationtimestamp| type| source ---|---|--- 2025-12-09 17:32:08+00:00| seen| https://bsky.app/profile/rapid7.com/post/3m7l376phks2e 2025-12-09 20:00:36+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3m7ldipcpad2b 2025-12-10 06:03:01+00:00| seen|...

CVE-2025-48607

In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48626

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48573

In sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground service while the app is in the background due to FGS while-in-use abuse. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

GHSA-PVCV-Q3Q7-266G Filament multi-factor authentication (app) recovery codes can be used multiple times

A flaw in the handling of recovery codes for app-based multi-factor authentication allows the same recovery code to be reused indefinitely. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled. If an attacker gains access to both the user's password and...

CVE-2025-14323

creationtimestamp| type| source ---|---|--- 2025-12-09 15:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ktcj4wd52k 2025-12-10 00:01:31+00:00| seen| https://bsky.app/profile/slackers.it/post/3m7lqxkbzco26 2025-12-10 13:40:19+00:00| seen|...

CVE-2025-40937

creationtimestamp| type| source ---|---|--- 2025-12-09 15:00:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ksqmxt5k2k...

CVE-2025-66330

App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-66554

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. Javascript and other options were correctly blocked ...

Android App "Brother iPrint&Scan" improper use of an external cache directory

Overview iPrint provided by Brother Industries, Ltd. contains the following vulnerability. Improper use of an external cache directory CWE-524 - CVE-2025-64696 Johan Francsics reported this vulnerability to BROTHER INDUSTRIES, LTD. and coordinated. After the coordination, BROTHER INDUSTRIES, LTD...

CVE-2025-64696

CVE-2025-64696 affects the Android app Brother iPrint&Scan (versions 6.13.7 and earlier). The root cause is improper use of an external cache directory, which can allow malicious apps to access application-specific files. Impact stated in sources: application-specific files may be accessed by oth...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)

None None...

Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)

None None...

CVE-2025-66568

creationtimestamp| type| source ---|---|--- 2025-12-09 07:28:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7jzihnz362v 2025-12-09 07:33:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/115688447292985606 2025-12-09 07:33:37+00:00| seen|...

PT-2025-49824

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malicious applications...

PT-2025-50298

Name of the Vulnerable Software and Affected Versions Filament versions 4.0.0 through 4.3.0 Description Filament, a collection of full-stack components for accelerated Laravel development, has an issue in how it manages recovery codes for application-based multi-factor authentication. The flaw...

CVE-2025-61078: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint...

EUVD-2025-201754

In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48606

In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation without a mechanism to uninstall it due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...