4836 matches found
CVE-2025-20989
Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmackey...
CVE-2025-20987
The CVE-2025-20987 issue is tied to fingerprint trustlet on Samsung devices, where improper access control allows local privileged attackers to obtain an auth_token. According to PT-2025-23749 (Fingerprint trustlet) and related sources, affected versions are before SMR May-2025 Release 1. The roo...
Malicious code in daenax (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3178f178bdbdd66d641b33909e4d04c304ec1b92b0bf5196a23abe7683d3d30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SAMSUNG SMR 安全漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR May-2025 Release 1, which stems from improper logging and could lead to a locally privileg...
SAMSUNG SMR 安全漏洞
SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR May-2025 Release 1, which stems from improper access control and could allow a locally...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to May-2025 Release 1, which originates from an out-of-bounds read and could allow a...
Malicious code in educational-depconf-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edb795d28942ec8fe6ea239625dc72e6a73b5965b8631c09f3544c800e54880 Any computer that has this package installed or running should be considered...
Packet Storm New Exploits for May, 2025
This archive contains all of the 129 exploits added to Packet Storm in May, 2025...
CVE-2025-5388
creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijnarr452 2025-05-31 21:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqipny77qt2s...
CVE-2025-5390
creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijhpicxr2 2025-05-31 21:52:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiq7vg22r2e 2025-06-01...
CVE-2025-5381
creationtimestamp| type| source ---|---|--- 2025-05-31 15:11:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqhzpzifg7v2 2025-05-31 18:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqidw226ua2p...
CVE-2025-5292
creationtimestamp| type| source ---|---|--- 2025-05-31 07:12:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqh6zl7unqc2 2025-05-31 11:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhogp32z62p...
CVE-2025-5016
creationtimestamp| type| source ---|---|--- 2025-05-31 04:28:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqgvtfdcxm42 2025-05-31 08:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhc4qawuf2r...
CVE-2025-48870
creationtimestamp| type| source ---|---|--- 2025-05-30 22:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqgagqgdxs2r...
WordPress FastSpring plugin <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Chuck in WordPress Plugin FastSpring versions = 3.0.1...
CVE-2025-40909
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...
CVE-2025-5190
creationtimestamp| type| source ---|---|--- 2025-05-30 12:37:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfaq6yvv7c2 2025-05-30 13:02:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqfc4zkuiz2a...
GHSA-Q7P4-7XJV-J3WF
creationtimestamp| type| source ---|---|--- 2025-05-30 12:10:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114596709195699004...
CVE-2025-48936
creationtimestamp| type| source ---|---|--- 2025-05-30 08:08:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqerkttznse2 2025-05-30 12:15:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114596728193306173...