Samsung Notes 安全漏洞

Samsung Notes is an application from the South Korean company Samsung SAMSUNG. An access control error vulnerability exists in Samsung Notes that stems from improper access control and can be exploited by an attacker to access data in multiple user profiles...

CVE-2025-1515

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6522 2025-03-05 11:00:40+00:00| seen| Telegram/0Yqtjw9YH6-bbPYOOOdcDrS2V3-Mk62rGjDskGptkEdbLqw 2025-03-05 11:49:56+00:00| seen|...

CVE-2025-27680

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6491 2025-03-05 08:34:35+00:00| seen| https://t.me/cvedetector/19585 2025-03-05 09:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuugtel2s 2025-03-06...

DEBIAN-CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1916

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1916: Use After Free

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CSRF vulnerability

Jenkins 2.499 and earlier, LTS 2.492.1 and earlier does not require POST requests for the HTTP endpoint toggling collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability...

CVE-2025-22870

creationtimestamp| type| source ---|---|--- 2025-03-04 20:44:04+00:00| seen| https://bsky.app/profile/go-perf.bsky.social/post/3ljldeoic6c2f 2025-03-07 18:52:42+00:00| seen| https://gist.github.com/EbonJaeger/d4b1234a40aa00f5181603a97fda735a 2025-03-07 20:29:35+00:00| seen|...

CVE-2024-55532

creationtimestamp| type| source ---|---|--- 2025-03-03 16:10:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ljidmis4fp2c 2025-03-03 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljim7hf6la2i 2025-03-11 03:12:44+00:00| seen|...

CVE-2025-26999: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Object Injection.This issue affects ProfileGrid : from n/a through = 5.9.4.3...

ASB-A-376259166

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-47051

creationtimestamp| type| source ---|---|--- 2025-02-26 09:44:35+00:00| seen| https://bsky.app/profile/druid.fi/post/3lj33ptmzfc2z 2025-02-26 12:31:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5484 2025-02-26 19:49:10+00:00| seen|...

CVE-2024-0148

creationtimestamp| type| source ---|---|--- 2025-02-25 20:22:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5366 2025-02-25 23:14:20+00:00| seen| https://t.me/cvedetector/18920 2025-02-27 06:26:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj5b52ojj32q 2025-02-27...

February 25, 2025—KB5052077 (OS Build 19045.5555) Preview

None None...

CVE-2025-27276

creationtimestamp| type| source ---|---|--- 2025-02-24 17:48:29+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114060119802420695 2025-02-24 19:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5mkuv2g...

CERTFR-2025-ACT-008

creationtimestamp| type| source ---|---|--- 2025-02-24 14:29:43+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114059338188078617 2025-02-24 15:20:23+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3liwnkkioxa2g 2025-03-10 13:12:34+00:00| seen|...

CVE-2025-24490

creationtimestamp| type| source ---|---|--- 2025-02-24 09:30:39+00:00| seen| Telegram/Vvd5MA2nmu0duCxF3bbKYEKWTKbzMFIp2pUAfan9WmCtw 2025-02-24 09:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114058233176053982 2025-02-24 10:26:03+00:00| seen|...

CVE-2024-12038

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyformsnav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input...

CVE-2024-12038: Improper Neutralization of Input During Web Page Generation

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyformsnav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input...