MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)

The package deploy-assert-debug-short-reject was found to contain malicious code...

MAL-2025-20236 Malicious code in fast-cloud-mu-debug-sandbox (npm)

The package fast-cloud-mu-debug-sandbox was found to contain malicious code...

brick (0.0.0), brick-node (>=0.0.8, <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0, <=2.0.0)

default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...

MAL-2025-25478 Malicious code in local-debug (npm)

The package local-debug was found to contain malicious code...

MAL-2025-19725 Malicious code in epsilon-scale-error-debug-container (npm)

The package epsilon-scale-error-debug-container was found to contain malicious code...

brick (0.0.0), brick-node (>=0.0.0, <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0, <=2.0.0)

local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...

MAL-2025-15502 Malicious code in bash-good-zero-old-debug (npm)

The package bash-good-zero-old-debug was found to contain malicious code...

MAL-2025-18143 Malicious code in debug-await-transpile-final-authorize (npm)

The package debug-await-transpile-final-authorize was found to contain malicious code...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

CVE-2025-48861 describes a vulnerability in the Task API endpoint of the ctrlX OS setup mechanism, where an unauthenticated, remote attacker could access and exfiltrate internal application data (e.g., debug logs and the version of installed apps). Public sources consistently tie the issue to ina...

PT-2025-33410 · Lotus Cars · Lotus Cars Android App

Name of the Vulnerable Software and Affected Versions: Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 Description: The Lotus Cars Android app allows data exfiltration via ADB backup on rooted or debug-enabled devices due to the allowBackup=true flag being set in its manifest. Th...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

CVE-2025-50861

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 contains an exported component, PushDeepLinkActivity , which is accessible without authentication via ADB or malicious apps. This vulnerability allows for unintended access to application internals, potentially leading to deni...

CVE-2025-50861

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

CVE-2025-50862

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 is vulnerable to data exfiltration due to the allowBackup=true flag being set in its manifest. This configuration allows unauthorized actors to extract user data via ADB backup on devices that are rooted or have debug mode ena...

PT-2025-33139 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability exists in the Task API endpoint of the ctrlX OS setup mechanism. This allows a remote, unauthenticated attacker to access and extract internal application data, including...

org.apache.camel.karaf:camel-as2 (>=4.7.0, <=4.8.9), org.apache.camel.karaf:camel-as2-test (>=4.7.0, <=4.8.9) +6 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71, <=1.78)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.71, =4.7.0, =4.7.0, =3.0.0-m1, =3.0.0-m1, =3.2.0, =3.18.0, =3.18.0, =3.18.0, =4.8.9 Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789690...