SAMSUNG MotionPhoto 安全漏洞

SAMSUNG MotionPhoto is a camera feature from Samsung South Korea. A security vulnerability exists in SAMSUNG MotionPhoto versions prior to 4.1.51 that stems from improper access control of the MPRemoteService, which could allow a local attacker to launch a privileged service...

PT-2025-48604

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 15.5.01.1 Description A flaw exists in Samsung Account due to improper input validation. This allows a local attacker to execute arbitrary script. Recommendations Update Samsung Account to version 15.5.01.1 or...

SAMSUNG Galaxy Store for Galaxy Watch 安全漏洞

SAMSUNG Galaxy Store for Galaxy Watch is an app store by Samsung South Korea. A security vulnerability exists in SAMSUNG Galaxy Store for Galaxy Watch prior to version 1.0.06.29, which stems from improper export of Android application components and could lead to a local attacker installing...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of the download feature and could lead to UI spoofing by a local attacker via a specially crafted HTML page...

PT-2025-48605

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 15.5.01.1 Description An improper authorization issue exists in Samsung Account. This allows a local attacker to launch arbitrary activity with Samsung Account privileges. Recommendations Update Samsung Accoun...

PT-2025-48601

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store...

SAMSUNG Cloud Assistant 安全漏洞

SAMSUNG Cloud Assistant is a component of Samsung South Korea that manages and coordinates data synchronization between devices and Samsung Cloud Services. A security vulnerability exists in SAMSUNG Cloud Assistant versions prior to 8.0.03.8, which stems from improperly set default permissions, a...

SAMSUNG Internet 安全漏洞

SAMSUNG Internet is a cell phone application from the South Korean company Samsung SAMSUNG. It provides a browser function. A security vulnerability exists in SAMSUNG Internet versions prior to 29.0.0.48, which stems from improper input validation and could allow a local attacker to inject...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of the password feature that could allow a local attacker to bypass authentication via a physical access device...

PT-2025-48760

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.41 Description An improper implementation in the Downloads feature allows a local attacker to perform UI spoofing through a specially crafted HTML page. Recommendations Update Google Chrome to version...

PT-2025-48765

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.41 Description An issue existed in the Passwords feature of Google Chrome that allowed a local attacker to bypass authentication with physical access to the device. The security severity was rated as...

HP Image Assistant - Potential Escalation of Privilege

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages. HP has identified affected versions and the minimum version th...

Sprecher Automation SPRECON-E-C和Sprecher Automation SPRECON-E-P 加密问题漏洞

The Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P are both an automation control and remote control device from Sprecher Automation of Austria. Sprecher Automation SPRECON-E-C and Sprecher Automation SPRECON-E-P have an encryption issue vulnerability that stems from...

PT-2025-48602

Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox...

PT-2025-48662

Insufficient encryption strength in Sprecher Automation SPRECON-E-C, SPRECON-E-P, and SPRECON-E-T3 allows a local unprivileged attacker to extract data from update images and thus obtain limited information about the architecture and internal processes...

SAMSUNG Account 安全漏洞

SAMSUNG Account is an account management software from Samsung South Korea. A security vulnerability exists in Samsung Account versions prior to 15.5.01.1, which stems from improper authorization and could allow a local attacker to initiate arbitrary activity with Samsung Account privileges...

EUVD-2025-200026

An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism...

CVE-2025-61229

An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls...

CVE-2025-59890

Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with local access to execute unauthorized code or commands. This security issue has been fixed in the latest version of Galileo which is...

kernel: wifi: mt76: fix linked list corruption

A flaw was found in the linux kernal wifi subsystem mt76txqschedulependingwcid and mt76txqschedulepending functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing ...