EUVD-2025-24940

Malicious code in bioql PyPI...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

Hobo AliCloud OSS credentials suffer from information leakage vulnerability

Lotus app is an investment and financial management software. There is an information leakage vulnerability in the Lotus Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret built into the mobile app. An attacker can...