MAL-2025-19725 Malicious code in epsilon-scale-error-debug-container (npm)

The package epsilon-scale-error-debug-container was found to contain malicious code...

MAL-2025-33440 Malicious code in small-debug-awk-hash-parse (npm)

The package small-debug-awk-hash-parse was found to contain malicious code...

MAL-2025-20236 Malicious code in fast-cloud-mu-debug-sandbox (npm)

The package fast-cloud-mu-debug-sandbox was found to contain malicious code...

Malicious code in bash-good-zero-old-debug (npm)

The package bash-good-zero-old-debug was found to contain malicious code...

Malicious code in interface-cloud-class-benchmark-debug (npm)

The package interface-cloud-class-benchmark-debug was found to contain malicious code...

MAL-2025-15502 Malicious code in bash-good-zero-old-debug (npm)

The package bash-good-zero-old-debug was found to contain malicious code...

MAL-2025-18144 Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)

The package deploy-assert-debug-short-reject was found to contain malicious code...

MAL-2025-18483 Malicious code in discord_debug_log (npm)

The package discorddebuglog was found to contain malicious code...

Malicious code in debug-book-analyze-easy-lambda (npm)

The package debug-book-analyze-easy-lambda was found to contain malicious code...

MAL-2025-25478 Malicious code in local-debug (npm)

The package local-debug was found to contain malicious code...

Malicious code in fast-cloud-mu-debug-sandbox (npm)

The package fast-cloud-mu-debug-sandbox was found to contain malicious code...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...

CVE-2025-48861

CVE-2025-48861 describes a vulnerability in the Task API endpoint of the ctrlX OS setup mechanism, where an unauthenticated, remote attacker could access and exfiltrate internal application data (e.g., debug logs and the version of installed apps). Public sources consistently tie the issue to ina...

CVE-2025-50861

The CVE-2025-50861 entry affects the Lotus Cars Android App (com.lotus.carsdomestic.intl) version 1.2.8, where the exported component PushDeepLinkActivity is accessible without authentication via ADB or malicious apps. This could allow unintended access to application internals and may lead to de...

CVE-2025-50862

CVE-2025-50862 affects the Lotus Cars Android app (com.lotus.carsdomestic.intl) v1.2.8. The underlying issue is allowBackup=true in the app manifest, which enables data exfiltration via ADB backup on rooted or debug-enabled devices. Impact per sources indicates potential user data exposure due to...

CVE-2025-50862

The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...

PT-2025-33410 · Lotus Cars · Lotus Cars Android App

Name of the Vulnerable Software and Affected Versions: Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 Description: The Lotus Cars Android app allows data exfiltration via ADB backup on rooted or debug-enabled devices due to the allowBackup=true flag being set in its manifest. Th...