522 matches found
PT-2025-40953
Name of the Vulnerable Software and Affected Versions Tesla Telematics Control Unit TCU firmware versions prior to 2025.14 Description The Tesla Telematics Control Unit TCU firmware is susceptible to an authentication bypass. The TCU operates the Android Debug Bridge adbd with root privileges...
EUVD-2023-39689
Malicious code in bioql PyPI...
EUVD-2023-35035
Malicious code in bioql PyPI...
EUVD-2024-54413
Malicious code in bioql PyPI...
EUVD-2025-2218
Malicious code in bioql PyPI...
EUVD-2024-27366
Malicious code in bioql PyPI...
EUVD-2023-47903
Malicious code in bioql PyPI...
EUVD-2025-18859
Malicious code in bioql PyPI...
EUVD-2025-31042
Malicious code in bioql PyPI...
EUVD-2023-37897
Malicious code in bioql PyPI...
EUVD-2023-45772
Malicious code in bioql PyPI...
EUVD-2023-52469
Malicious code in bioql PyPI...
PT-2025-40410
Name of the Vulnerable Software and Affected Versions Flock Safety Android Collins application aka com.flocksafety.android.collins version 6.35.31 Description The Flock Safety Android Collins application version 6.35.31 lacks authentication. It manages the camera feed on Falcon, Sparrow, and Brav...
CVE-2025-59834
CVE-2025-59834 affects the adb-mcp MCP Server. The vulnerability stems from constructing shell commands by concatenating untrusted input (notably the device parameter) in executeAdbCommand, enabling remote command injection via the MCP Server tool definitions (e.g., inspect_ui). The issue impacts...
CVE-2025-59834 Command Injection in adb-mcp MCP Server
ADB MCP Server is a MCP Model Context Protocol server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementatio...
Command Injection in adb-mcp MCP Server
Command Injection in adb-mcp MCP Server The MCP Server at https://github.com/srmorete/adb-mcp is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server is also published publicly to npm at...
CVE-2025-57452
In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...
Linux Distros Unpatched Vulnerability : CVE-2016-3876
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - providers/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the...
Linux Distros Unpatched Vulnerability : CVE-2025-52926
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface. CVE-2025-52926 Note that Nessus relies...
