CVE-2025-63435

Xtooltech Xtool AnyScan Android App 4.40.40 is affected by Missing Authentication for Critical Function. The server-side endpoint that serves update packages does not require authentication, allowing an unauthenticated remote attacker to download official update packages. Public documents do not ...