CVE-2025-54448

creationtimestamp| type| source ---|---|--- 2025-07-23 07:04:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhd4ox4323 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-664/...

CVE-2025-51481

creationtimestamp| type| source ---|---|--- 2025-07-22 21:48:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luliaz6au423...

CVE-2025-6082

creationtimestamp| type| source ---|---|--- 2025-07-22 15:15:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukscirdky2j 2025-07-22 21:00:04+00:00| published-proof-of-concept| Telegram/BGbdnO5qVCeRESkVN9shfeMdpVcVG1XeThDpF5WVRjJQCD0 2025-07-23 03:00:11+00:00|...

CVE-2025-7685

creationtimestamp| type| source ---|---|--- 2025-07-22 15:05:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukrqltzkb2j...

CVE-2025-7893

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of android application components. Attacking...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7891

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...

CVE-2025-7692

creationtimestamp| type| source ---|---|--- 2025-07-22 12:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukkkuzgvu2i...

CVE-2025-7890

A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.dunamu.stockplus. The manipulation leads to improper export of android...

CVE-2025-7645

creationtimestamp| type| source ---|---|--- 2025-07-22 12:41:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukjo7skz52j...

CVE-2025-46122

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-46118

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-52580

The vulnerability CVE-2025-52580 affects the region PAY App for Android (Gift Pad Co., Ltd.) prior to version 1.5.28. Cause: insertion of sensitive information into log files (CWE-532). Impact: sensitive user data could be exposed to an attacker who gains access to application logs. Mitigation: u...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

"region PAY" App for Android vulnerable to insertion of sensitive information into log file

Overview "region PAY" App for Android provided by Gift Pad Co.,Ltd. contains the following vulnerability. Insertion of sensitive information into log file CWE-532 - CVE-2025-52580 Kubo Naoki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

CVE-2025-46117

creationtimestamp| type| source ---|---|--- 2025-07-22 00:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lujchlonao2i 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-36845

creationtimestamp| type| source ---|---|--- 2025-07-22 00:54:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lujc6n4paj2j 2026-01-16 07:26:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-36845.yaml 2026-01-17...

JVN#07825095: "region PAY" App for Android vulnerable to insertion of sensitive information into log file

"region PAY" App for Android provided by Gift Pad Co.,Ltd. contains the following vulnerability. Insertion of sensitive information into log file CWE-532 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 2.4 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 2.4...