CVE-2021-24450

The User Registration, User Profiles, Login & Membership – ProfilePress Formerly WP User Avatar WordPress plugin before 3.1.8 did not sanitise or escape some of its settings before saving them and outputting them back in the page, allowing high privilege users such as admin to set JavaScript...

CVE-2020-26415

Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab =12.2 to =13.5 to =13.6 to 13.6.2...

CVE-2020-0943

An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes notifications generated by work profiles.This could allow an unauthenticated attacker to view notifications, aka 'Microsoft YourPhone Application for Android...

CVE-2019-9377

In FingerprintService, there is a possible bypass for operating system protections that isolate user profiles from each other due to a missing permission check. This could lead to a local information disclosure of metadata about the biometrics of another user on the device with no additional...

CVE-2025-1418 Information disclosure in Proget MDM

A low-privileged user can access information about profiles created in Proget MDM Mobile Device Management, which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive information including their usage in connected devices. This issue has been fixed...

CVE-2025-1418 Information disclosure in Proget MDM

A low-privileged user can access information about profiles created in Proget MDM Mobile Device Management, which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive information including their usage in connected devices. This issue has been fixed...

CVE-2025-41225

creationtimestamp| type| source ---|---|--- 2025-05-20 14:48:22+00:00| seen| https://bsky.app/profile/andersonc0d3.bsky.social/post/3lpmdfkawoc2w 2025-05-20 14:48:25+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/114540708203094327 2025-05-20 14:54:00+00:00| seen|...

CVE-2025-4945

creationtimestamp| type| source ---|---|--- 2025-05-19 17:39:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16900 2025-09-05 23:10:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ly4rs4jqps23 2025-09-05 23:53:08+00:00| seen|...

CVE-2025-4866

creationtimestamp| type| source ---|---|--- 2025-05-18 08:27:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgn4a5ohco2 2025-05-18 09:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqri6jl2s 2025-07-08...

CVE-2025-4858

creationtimestamp| type| source ---|---|--- 2025-05-18 04:32:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg7xhjrfqg2 2025-05-18 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2ckot52o 2025-05-19...

CVE-2025-4835

creationtimestamp| type| source ---|---|--- 2025-05-17 20:26:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfeuj4t7t22 2025-05-17 21:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7c775a2s...

CVE-2025-4609

creationtimestamp| type| source ---|---|--- 2025-05-15 10:48:39+00:00| exploited| https://t.me/itsecnews/5885 2025-05-15 19:50:59+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lpaby2mjrc2v 2025-05-15 20:01:35+00:00| seen|...

CERTFR-2025-ALE-007

creationtimestamp| type| source ---|---|--- 2025-05-14 11:27:31+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lp4vev6fp52t 2025-05-14 11:31:46+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lp4vmht6yb2f 2025-05-14 11:31:47+00:00| seen|...

DNS Query Forgery: a Client-Side Defense against Mobile App Traffic Profiling

Mobile applications continuously generate DNS queries that can reveal sensitive user behavioral patterns even when communications are encrypted. This paper presents a privacy enhancement framework based on query forgery to protect users against profiling attempts that leverage these background...

CVE-2025-40582

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16093 2025-05-13 10:48:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmzdsie42 2025-05-13 10:52:43+00:00| seen|...

CVE-2025-4502

creationtimestamp| type| source ---|---|--- 2025-05-10 14:27:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15896 2025-05-10 14:28:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bni5jbr2 2025-05-10...

CVE-2025-4500

creationtimestamp| type| source ---|---|--- 2025-05-10 13:27:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15894 2025-05-10 14:26:46+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5awmppo42 2025-05-10...

CVE-2025-4499

creationtimestamp| type| source ---|---|--- 2025-05-10 12:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15891 2025-05-10 14:26:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5bccneaa2 2025-05-10...

CVE-2025-4486

creationtimestamp| type| source ---|---|--- 2025-05-09 22:01:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lor7jed4m4a2 2025-05-09 22:30:58+00:00| published-proof-of-concept| Telegram/-FSytdz-B3MQuFO8RZfSO4jPAWx-8JuShz-w-b65AWDPvJk...

CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...