CVE-2025-21045

Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-21044

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-6038

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation via password update in all versions up to, and including, 1.4.0. This is due to the plugin not properly validating a user's identity prior to updating...

The vulnerability of Websoft HCM’s automation software for HR processes allows a hacker to read arbitrary files.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

PT-2025-41561

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.3.21 through 7.4.3.111 Liferay DXP versions 2023.Q4.0 through 2023.Q4.5 Liferay DXP versions 2023.Q3.1 through 2023.Q3.8 Liferay versions 7.4 update 21 through update 92 Description A cross-site scripting XSS issue...

PT-2025-41520

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description A flaw exists in Smart Switch that allows local attackers to access backup data from applications due to the cleartext storage of sensitive information. User interaction is required to trigge...

PT-2025-41525

Name of the Vulnerable Software and Affected Versions Retail Mode versions prior to 5.59.11 Description A flaw exists in input validation within Retail Mode. This allows a local attacker to execute privileged commands on their own device. Recommendations Update Retail Mode to version 5.59.11 or...

PT-2025-41528

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the reading of image data within Samsung Notes. This allows a local attacker to access memory outside of the intended boundaries. Recommendations Updat...

PT-2025-41508

Name of the Vulnerable Software and Affected Versions KnoxGuard versions prior to SMR Oct-2025 Release 1 Description A flaw exists in access control within KnoxGuard that could allow attackers with physical access to utilize privileged APIs. This issue impacts systems where an attacker has the...

PT-2025-41509

Name of the Vulnerable Software and Affected Versions Knox Enterprise versions prior to SMR Oct-2025 Release 1 Description A relative path traversal issue exists in Knox Enterprise prior to SMR Oct-2025 Release 1, potentially allowing local attackers to execute arbitrary code. Recommendations...

PT-2025-41510

Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in SecSettings. This allows local attackers to access sensitive information. User interaction is required to trigger this issue...

PT-2025-41521

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software stores sensitive information in cleartext, potentially allowing local attackers to access this data. User interaction is required to trigger this issue. The vulnerability affects...

PT-2025-41558

Name of the Vulnerable Software and Affected Versions WP JobHunt plugin for WordPress versions prior to 7.7 Description The WP JobHunt plugin for WordPress, used by the JobCareer theme, has a flaw that allows malicious code to be stored and executed when a user views an affected page. This is due...

PT-2025-41524

Name of the Vulnerable Software and Affected Versions Samsung Smart Switch versions prior to 3.7.66.6 Description A flaw exists in the authentication process of Smart Switch that could allow nearby attackers to gain access to data during transfers. This authentication bypass enables unauthorized...

PT-2025-41526

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the SPI decoder. This allows local attackers to access memory outside of the intended boundaries. Recommendations Update Samsung Notes to version...

The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-41519

Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.30.5.105 Description An improper authorization issue exists in Samsung Health. This allows local attackers to access data within Samsung Health. Recommendations Update Samsung Health to version 6.30.5.105 or...

PT-2025-41527

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the allocation of image buffers. This can allow a local attacker to access memory outside of the intended boundaries. Recommendations Update Samsung...

PT-2025-41506

Name of the Vulnerable Software and Affected Versions Galaxy Watch versions prior to SMR Oct-2025 Release 1 Description An issue exists with the insecure storage of sensitive information in Galaxy Watch. Local attackers may be able to access sensitive information. Recommendations Update to SMR...

PT-2025-41518

Name of the Vulnerable Software and Affected Versions Routines versions prior to 4.8.7.1 Routines versions prior to 4.9.6.0 Description An improper access control issue exists in Routines. This allows local attackers to potentially execute arbitrary code with SystemUI privilege. Recommendations...