31776 matches found
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Google said it's implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to "ensure a safe and compliant ecosystem for users." The policy applies to markets like Bahrain, Canada, Hong...
CVE-2025-50862
CVE-2025-50862 affects the Lotus Cars Android app (com.lotus.carsdomestic.intl) v1.2.8. The underlying issue is allowBackup=true in the app manifest, which enables data exfiltration via ADB backup on rooted or debug-enabled devices. Impact per sources indicates potential user data exposure due to...
OPPO HEALTH APP 安全漏洞
OPPO HEALTH APP is a health mobile app from China's OPPO. A security vulnerability exists in OPPO HEALTH APP, which originates from the introduction of malicious JS code via loading an arbitrary external URL via the WebView component, which may steal user tokens...
PT-2025-33370 · Unknown · Hakeemnala Build App Online
Name of the Vulnerable Software and Affected Versions: hakeemnala Build App Online versions n/a through 1.0.23 Description: A Cross-Site Request Forgery CSRF issue exists in hakeemnala Build App Online, potentially allowing attackers to perform actions on behalf of authenticated users...
WordPress plugin Build App Online 跨站请求伪造漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in WordPress plugin Build App Online 1.0.23 and prior...
Altus Cars Lotus Cars Android app 安全漏洞
Altus Cars Lotus Cars Android app is a mobile app from Altus Cars UK that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which originates from unauthenticated access to a component and could lead to a...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
PT-2025-33409 · Lotus Cars · Lotus Cars Android App
Name of the Vulnerable Software and Affected Versions: Lotus Cars Android App version 1.2.8 Description: The Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
PT-2025-33138 · Ctrlx Os · Ctrlx Os
Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the web application of the ctrlX OS setup mechanism allowed an authenticated attacker with low privileges to gain remote access to backup archives created by a user with...
Altus Cars Lotus Cars Android app 安全漏洞
Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...
Malicious code in web-tv-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5014feae2671e422a28a92b6bd6f8a040a605699f1ebea3e44fb3f910e9e893 The OpenSSF Package Analysis project identified 'web-tv-app' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6868 Malicious code in web-tv-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5014feae2671e422a28a92b6bd6f8a040a605699f1ebea3e44fb3f910e9e893 The OpenSSF Package Analysis project identified 'web-tv-app' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2025-45314
creationtimestamp| type| source ---|---|--- 2025-08-13 19:26:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwcklb2lvp2p...
CVE-2025-2183
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2025-6715
creationtimestamp| type| source ---|---|--- 2025-08-13 09:01:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwbhnewh6s2b 2025-08-29 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfahep42p...
MAL-2025-6912 Malicious code in android-app-promotion (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...