CVE-2025-8210 Yeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components

A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml of the component com.yeelight.cherry. The manipulation leads to improper export of android application components...

CVE-2025-8210

CVE-2025-8210 affects Yeelink Yeelight App for Android (up to v3.5.4), targeting the AndroidManifest.xml in the com.yeelight.cherry component. The root cause is improper export of Android components due to manipulation of an unknown function within the manifest, enabling local access exploitation...

CVE-2025-8210 Yeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components

A vulnerability was found in Yeelink Yeelight App up to 3.5.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml of the component com.yeelight.cherry. The manipulation leads to improper export of android application components...

CVE-2025-8207 Canara ai1 Mobile Banking App com.canarabank.mobility AndroidManifest.xml improper export of android application components

A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.canarabank.mobility. The manipulation leads to improper export of android application...

CVE-2025-8207

CVE-2025-8207 affects Canara ai1 Mobile Banking App version 3.6.23 on Android. The issue stems from unknown processing of AndroidManifest.xml in the com.canarabank.mobility component, causing improper export of Android application components. Local access is required to exploit. The exploit has b...

CVE-2025-8207 Canara ai1 Mobile Banking App com.canarabank.mobility AndroidManifest.xml improper export of android application components

A vulnerability was found in Canara ai1 Mobile Banking App 3.6.23 on Android and classified as problematic. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.canarabank.mobility. The manipulation leads to improper export of android application...

MAL-2025-6296 Malicious code in node-buildpack-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 853e825cb3a7ee79b6c801ac036e895ab6ef780891a544abe6b9f5c54bdc33b9 The OpenSSF Package Analysis project identified...

Malicious code in node-buildpack-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 853e825cb3a7ee79b6c801ac036e895ab6ef780891a544abe6b9f5c54bdc33b9 The OpenSSF Package Analysis project identified...

PT-2025-30986 · Canara Bank · Canara Ai1 Mobile Banking App

Name of the Vulnerable Software and Affected Versions: Canara ai1 Mobile Banking App version 3.6.23 Description: A problematic issue exists due to improper export of android application components resulting from unknown processing of the AndroidManifest.xml file within the com.canarabank.mobility...

Canara ai1 Mobile Banking App 安全漏洞

Canara ai1 Mobile Banking App is a mobile banking application by Canara India. A security vulnerability exists in Canara ai1 Mobile Banking App version 3.6.23, which originates from the file AndroidManifest.xml that causes improper export of Android components...

PT-2025-30987 · Yeelink · Yeelight App +1

Name of the Vulnerable Software and Affected Versions: Yeelink Yeelight App versions up to 3.5.4 Description: A vulnerability exists in the Yeelink Yeelight App on Android. The issue involves improper export of android application components due to manipulation of an unknown function within the...

Yeelight App 安全漏洞

Yeelight App is an application for controlling smart lighting products from the Chinese company Yeelight. A security vulnerability exists in Yeelight App 3.5.4 and earlier versions, which originates from the file AndroidManifest.xml that causes improper export of Android components...

CVE-2025-52447

creationtimestamp| type| source ---|---|--- 2025-07-25 19:33:53+00:00| seen| https://bsky.app/profile/potato.software/post/3luss4tq2yl2y 2025-07-26 02:23:51+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lutizwkvtc2j...

CVE-2025-7723

creationtimestamp| type| source ---|---|--- 2025-07-25 16:32:42+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lushyr2lw22a...

CVE-2025-7745

creationtimestamp| type| source ---|---|--- 2025-07-25 06:30:55+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3lurgesaa732y 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-02...

CVE-2025-23281

creationtimestamp| type| source ---|---|--- 2025-07-25 03:34:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4iqa7jk2g 2025-08-02 20:17:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvgycns3d22j 2025-08-03 07:31:42+00:00| seen|...

CVE-2025-29631

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 is vulnerable to command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability m...

CVE-2025-53940

CVE-2025-53940 affects Quiet, an open-source p2p chat alternative. Vulnerable in Quiet 6.1.0-alpha.4 and earlier due to an insecure, non-constant-time token verification comparison in the backend/frontend API, enabling a timing attack to guess the token character by character. The issue is resolv...

GHSA-RM8P-CX58-HCVX

creationtimestamp| type| source ---|---|--- 2025-07-24 12:00:52+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupidus46d2k 2025-07-25 12:00:52+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3luryssiohm2k...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a Denial of Service and Uncontrolled Resource Consumption due to Multer and brace-expansion( CVE-2025-48997,CVE-2025-5889 )

Summary IBM App Connect Enterprise runtime and IBM App Connect Enterprise Connector Discovery and OpenAPI Editor are vulnerable to a Denial of Service and Uncontrolled Resource Consumption due to Multer and brace-expansion. Vulnerability Details CVEID:CVE-2025-48997 DESCRIPTION: Multer is a node....