EUVD-2025-31042

Malicious code in bioql PyPI...

EUVD-2025-18859

Malicious code in bioql PyPI...

EUVD-2025-2218

Malicious code in bioql PyPI...

EUVD-2023-39689

Malicious code in bioql PyPI...

EUVD-2024-27366

Malicious code in bioql PyPI...

EUVD-2023-52469

Malicious code in bioql PyPI...

EUVD-2023-47903

Malicious code in bioql PyPI...

PT-2025-40410

Name of the Vulnerable Software and Affected Versions Flock Safety Android Collins application aka com.flocksafety.android.collins version 6.35.31 Description The Flock Safety Android Collins application version 6.35.31 lacks authentication. It manages the camera feed on Falcon, Sparrow, and Brav...

CVE-2025-59834

CVE-2025-59834 affects the adb-mcp MCP Server. The vulnerability stems from constructing shell commands by concatenating untrusted input (notably the device parameter) in executeAdbCommand, enabling remote command injection via the MCP Server tool definitions (e.g., inspect_ui). The issue impacts...

CVE-2025-59834 Command Injection in adb-mcp MCP Server

ADB MCP Server is a MCP Model Context Protocol server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementatio...

CVE-2025-59834: Improper Neutralization of Special Elements used in a Command

ADB MCP Server is a MCP Model Context Protocol server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementatio...

Command Injection in adb-mcp MCP Server

Command Injection in adb-mcp MCP Server The MCP Server at https://github.com/srmorete/adb-mcp is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server is also published publicly to npm at...

CVE-2025-57452

In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...

CVE-2025-57452: Improper Neutralization of Input During Web Page Generation

In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...

Linux Distros Unpatched Vulnerability : CVE-2016-3876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the...

Linux Distros Unpatched Vulnerability : CVE-2025-52926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface. CVE-2025-52926 Note that Nessus relies...

CVE-2025-25736: Missing Authentication for Critical Function

Kapsch TrafficCom RIS-9260 RSU LEO v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to contain Android Debug Bridge ADB pre-installed /mnt/c3platpersistent/opt/platform-tools/adb and enabled by default, allowing unauthenticated root shell access to the cellular modem via the...

CVE-2025-55623: Authentication Bypass Using an Alternate Path or Channel

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-50862: Exposure of Sensitive Information to an Unauthorized Actor

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

CVE-2025-50861: Improper Access Control

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...