CVE-2025-20966

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-20966

CVE-2025-20966 affects Samsung Gallery; vulnerable is improper access control in versions: Global Android 13 ≤ 14.5.10.3, China Android 13 ≤ 14.5.09.3, and Android 14 ≤ 15.5.04.5. Root cause: improper access control enabling cross-profile data access by physical attackers. Impact: exposure of dat...

PT-2025-20051 · Samsung · Samsung Gallery

Name of the Vulnerable Software and Affected Versions: Samsung Gallery versions prior to 14.5.10.3 in Global Android 13 Samsung Gallery version 14.5.09.3 in China Android 13 Samsung Gallery version 15.5.04.5 in Android 14 Description: The issue is related to improper access control in Samsung...

CVE-2025-20966: Undefined Security Weakness

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profiles...

CVE-2025-46736

creationtimestamp| type| source ---|---|--- 2025-05-06 17:21:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15163 2025-05-06 18:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis7nmx22j 2025-05-06 19:20:02+00:00| seen|...

CVE-2025-37799

creationtimestamp| type| source ---|---|--- 2025-05-03 12:17:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14693 2025-05-03 12:58:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lobd5iffbx52 2025-05-03...

CVE-2025-4198

creationtimestamp| type| source ---|---|--- 2025-05-03 03:26:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loafejza3l42 2025-05-03 06:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loaob3fxq324 2025-05-03...

CVE-2025-21572

creationtimestamp| type| source ---|---|--- 2025-05-02 22:20:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14622 2025-05-03 01:36:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo7vcz546tq2 2025-05-03 01:59:28+00:00| seen|...

CVE-2025-1326

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14429 2025-05-02 07:19:04+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lo6baa6gafd2 2025-05-02 07:34:43+00:00| seen|...

CVE-2025-24132

creationtimestamp| type| source ---|---|--- 2025-04-29 14:21:44+00:00| seen| https://bsky.app/profile/dysternis.bsky.social/post/3lnxi4jp6lc2g 2025-04-29 22:16:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34679 2025-04-29 22:33:24+00:00| published-proof-of-concept|...

CVE-2025-4005

creationtimestamp| type| source ---|---|--- 2025-04-28 07:11:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13661 2025-04-28 07:13:24+00:00| seen| https://bsky.app/profile/potato.software/post/3lnu7pr677c2b 2025-04-28 09:41:00+00:00| seen|...

CVE-2025-46654

creationtimestamp| type| source ---|---|--- 2025-04-26 21:09:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13586 2025-04-26 21:37:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnqow6hszp72 2025-04-26...

CVE-2025-25777

Insecure Direct Object Reference IDOR in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks...

CVE-2025-3915

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13567 2025-04-26 06:12:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3eesuwja2 2025-04-26 07:39:17+00:00| seen|...

CVE-2025-46617

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13391 2025-04-25 07:07:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxzjsx432 2025-04-25 09:20:20+00:00| seen|...

CVE-2025-3868

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13387 2025-04-25 07:07:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxvq6q752 2025-04-25 10:49:34+00:00| seen|...

CVE-2025-23244

creationtimestamp| type| source ---|---|--- 2025-04-25 01:19:57+00:00| seen| Telegram/abtIrYps6YMc4YjHeyZnojw-J7liWtzA7dofBdE-MNPdoT0 2025-04-25 03:23:17+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnmbhiqp2k22 2025-05-01 14:15:19+00:00| seen|...

CVE-2025-25777

Insecure Direct Object Reference IDOR in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks...

CVE-2025-43859

creationtimestamp| type| source ---|---|--- 2025-04-24 19:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114394512917622666 2025-04-24 21:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114395140063306383 2025-04-24 22:24:48+00:00| seen|...

CVE-2025-43865

creationtimestamp| type| source ---|---|--- 2025-04-24 14:55:19+00:00| published-proof-of-concept| https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25...