CVE-2025-3698

CVE-2025-3698 describes an interface exposure vulnerability in the mobile application com.transsion.carlcare (TECNO/Transsion). The available details indicate a potential information leakage risk. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) with a base score of 7.5 (HIGH) suggests e...

CVE-2025-3698

Interface exposure vulnerability in the mobile application com.transsion.carlcare may lead to information leakage risk...

CVE-2025-3698

Interface exposure vulnerability in the mobile application com.transsion.carlcare may lead to information leakage risk...

TECNO com.transsion.carlcare 安全漏洞

TECNO com.transsion.carlcare is a mobile application from Transsion TECNO, a Chinese company. A security vulnerability exists in TECNO com.transsion.carlcare that originates from an interface exposure that could lead to information disclosure...

CVE-2025-30123

An issue was discovered on ROADCAM X3 devices. The mobile app APK Viidure contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device...

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

CVE-2025-2190 affects the mobile app com.transsnet.store. Root cause per the CVE metadata is a man‑in‑the‑middle vulnerability that may enable code injection. CVSS v3.1 vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 8.1 (HIGH). Multiple connected feeds corroborate the issue; no expli...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

PT-2025-10703

Name of the Vulnerable Software and Affected Versions com.transsnet.store affected versions not specified Description The mobile application has a man-in-the-middle attack issue, which may lead to code injection risks. Recommendations At the moment, there is no information about a newer version...

CVE-2025-0895

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

CVE-2024-55907

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

CVE-2025-24849 Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Cleartext Transmission of Sensitive Information

Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure...

CVE-2025-1298

Logic vulnerability in the mobile application com.transsion.carlcare may lead to the risk of account takeover...

CVE-2025-1298

Logic vulnerability in the mobile application com.transsion.carlcare may lead to the risk of account takeover...

CVE-2025-1298

Logic vulnerability in the mobile application com.transsion.carlcare may lead to the risk of account takeover...

CVE-2025-1298

CVE-2025-1298 involves a logic vulnerability in the mobile application com.transsion.carlcare (TECNO’s Carlcare app). The issue is described as a logic flaw that may lead to an account takeover. The formal CVSS 3.1 metrics indicate a high-severity, 9.8 (CRITICAL) base score with network attack ve...