brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0, <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

MAL-2025-20236 Malicious code in fast-cloud-mu-debug-sandbox (npm)

The package fast-cloud-mu-debug-sandbox was found to contain malicious code...

MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)

The package deploy-assert-debug-short-reject was found to contain malicious code...

MAL-2025-15502 Malicious code in bash-good-zero-old-debug (npm)

The package bash-good-zero-old-debug was found to contain malicious code...

MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)

The package small-debug-awk-hash-parse was found to contain malicious code...

Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-37580 Malicious code in uglify-debug-key-query-refactor (npm)

The package uglify-debug-key-query-refactor was found to contain malicious code...

MAL-2025-18483 Malicious code in discord_debug_log (npm)

The package discorddebuglog was found to contain malicious code...

MAL-2025-18178 Malicious code in default-debug (npm)

The package default-debug was found to contain malicious code...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

CVE-2025-48861 describes a vulnerability in the Task API endpoint of the ctrlX OS setup mechanism, where an unauthenticated, remote attacker could access and exfiltrate internal application data (e.g., debug logs and the version of installed apps). Public sources consistently tie the issue to ina...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

CVE-2025-50862

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 is vulnerable to data exfiltration due to the allowBackup=true flag being set in its manifest. This configuration allows unauthorized actors to extract user data via ADB backup on devices that are rooted or have debug mode ena...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

PT-2025-33410 · Lotus Cars · Lotus Cars Android App

Name of the Vulnerable Software and Affected Versions: Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 Description: The Lotus Cars Android app allows data exfiltration via ADB backup on rooted or debug-enabled devices due to the allowBackup=true flag being set in its manifest. Th...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

PT-2025-33139 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability exists in the Task API endpoint of the ctrlX OS setup mechanism. This allows a remote, unauthenticated attacker to access and extract internal application data, including...

CVE-2025-50861

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 contains an exported component, PushDeepLinkActivity , which is accessible without authentication via ADB or malicious apps. This vulnerability allows for unintended access to application internals, potentially leading to deni...