CVE-2025-20965

Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access sensitive data...

CVE-2025-20971

Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...

CVE-2025-20971

Samsung Flow games console: A CVE-2025-20971 vulnerability affects Samsung Flow prior to version 4.9.17.6, caused by improper input validation. This allows a local attacker to access data within Samsung Flow. Impact is data exposure within the app; no exploit details are provided. Remediation: up...

CVE-2025-20971

Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...

CVE-2025-20969

Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...

CVE-2025-20969

CVE-2025-20969 affects Samsung Gallery: improper input validation allows a local attacker to access data within the app. Affected versions are pre-14.5.10.3 (Global Android 13), pre-14.5.09.3 (China Android 13), and pre-15.5.04.5 (Android 14). Remediation: update to 14.5.10.3+/14.5.09.3+/15.5.04....

CVE-2025-20969

Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery...

CVE-2025-20968

Samsung Gallery CVE-2025-20968 is due to improper access control in Gallery prior to version 14.5.10.3 (Global Android 13), 14.5.09.3 (China Android 13), and 15.5.04.5 (Android 14). This allows remote attackers to access data and perform internal operations within the app. Affected versions are p...

CVE-2025-20968

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operations within Samsung Gallery...

CVE-2025-20966

CVE-2025-20966 affects Samsung Gallery; vulnerable is improper access control in versions: Global Android 13 ≤ 14.5.10.3, China Android 13 ≤ 14.5.09.3, and Android 14 ≤ 15.5.04.5. Root cause: improper access control enabling cross-profile data access by physical attackers. Impact: exposure of dat...

CVE-2025-20965

CVE-2025-20965 affects Samsung Bixby wakeup prior to version 2.3.74.8. The root cause is improper handling of insufficient permissions, enabling local attackers to access sensitive data. Documented impact shows confidentiality exposure with privilege/attack conditions: local access, low user inte...

SAMSUNG Flow 安全漏洞

SAMSUNG Flow is a software product from the South Korean company Samsung SAMSUNG. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in SAMSUNG Flow versions prior to 4.9.17.6, which stems from improper input validation and could allow a...

PT-2025-20050 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 2.3.74.8 Description: The issue is related to the improper handling of insufficient permission in Bixby wakeup, allowing local attackers to access sensitive data. Recommendations: For versions prior to 2.3.74.8, update...

COVID19 Testing Management System profile.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in file /profile.ph...

PT-2025-20054 · Samsung · Samsung Gallery

Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery versions prior to 14.5.09.3 in China Android 13 Samsung Gallery versions prior to 15.5.04.5 in Android 14 Description: The issue is related to improper input...

Moodle Information Disclosure Vulnerability (CNVD-2025-09237)

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from the edit and delete pages of the moddata module...

SAMSUNG Gallery 安全漏洞

SAMSUNG Gallery is an application from the South Korean company Samsung SAMSUNG. The best image and video viewing application for Galaxy users. SAMSUNG Gallery suffers from a security vulnerability that stems from improper input validation and could lead to a local attacker accessing internal dat...

PT-2025-20056 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.17.6 Description: The issue is related to improper input validation, allowing local attackers to access data within Samsung Flow. Recommendations: For versions prior to 4.9.17.6, update to version 4.9.17.6 o...

Cisco IOS XE 安全漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from misbehavior of API...

The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the trace parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...