CVE-2025-7891

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7692

creationtimestamp| type| source ---|---|--- 2025-07-22 12:57:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukkkuzgvu2i...

CVE-2025-7890

A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.dunamu.stockplus. The manipulation leads to improper export of android...

CVE-2025-7645

creationtimestamp| type| source ---|---|--- 2025-07-22 12:41:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukjo7skz52j...

CVE-2025-46122

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:42+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-46118

creationtimestamp| type| source ---|---|--- 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-52580

The vulnerability CVE-2025-52580 affects the region PAY App for Android (Gift Pad Co., Ltd.) prior to version 1.5.28. Cause: insertion of sensitive information into log files (CWE-532). Impact: sensitive user data could be exposed to an attacker who gains access to application logs. Mitigation: u...

"region PAY" App for Android vulnerable to insertion of sensitive information into log file

Overview "region PAY" App for Android provided by Gift Pad Co.,Ltd. contains the following vulnerability. Insertion of sensitive information into log file CWE-532 - CVE-2025-52580 Kubo Naoki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

CVE-2025-46117

creationtimestamp| type| source ---|---|--- 2025-07-22 00:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lujchlonao2i 2025-07-22 07:21:41+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lujxssvbn222...

CVE-2025-36845

creationtimestamp| type| source ---|---|--- 2025-07-22 00:54:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lujc6n4paj2j 2026-01-16 07:26:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-36845.yaml 2026-01-17...

JVN#07825095: "region PAY" App for Android vulnerable to insertion of sensitive information into log file

"region PAY" App for Android provided by Gift Pad Co.,Ltd. contains the following vulnerability. Insertion of sensitive information into log file CWE-532 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 2.4 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 2.4...

PT-2025-30381 · Unknown · Region Pay App For Android

Name of the Vulnerable Software and Affected Versions: region PAY App for Android versions prior to 1.5.28 Description: A sensitive information disclosure issue exists due to the insertion of confidential information into log files. If exploited, sensitive user information may be exposed to an...

RAGFlow 跨站脚本漏洞

RAGFlow is an open source RAG engine based on deep document understanding by InfiniFlow open source. A security vulnerability exists in RAGFlow version 0.17.2, which stems from a stored cross-site scripting vulnerability in api.apps.dialogapp.setdialog that could lead to the execution of arbitrar...

CVE-2025-7940

A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android...

CVE-2025-7940 Genshin Albedo Cat House App com.house.auscat AndroidManifest.xml improper export of android application components

A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android...

CVE-2025-7940

CVE-2025-7940 affects Genshin Albedo Cat House App version 1.0.2 on Android, specifically the AndroidManifest.xml handling in component com.house.auscat. The vulnerability is described as improper export of Android application components due to a manipulation of the manifest, enabling local acces...