8707 matches found
CVE-2025-48861
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
Linux Distros Unpatched Vulnerability : CVE-2024-26787
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: stm32: fix DMA API overlapping mappings warning Turning on CONFIGDMAAPIDEBUGSG...
Linux Distros Unpatched Vulnerability : CVE-2022-48937
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring: add a schedule point in ioaddbuffers Looping 65535 times doing kmalloc calls can...
CVE-2025-55165
Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
Malicious code in local-debug (npm)
The package local-debug was found to contain malicious code...
Malicious code in epsilon-scale-error-debug-container (npm)
The package epsilon-scale-error-debug-container was found to contain malicious code...
Malicious code in discord_debug_log (npm)
The package discorddebuglog was found to contain malicious code...
MAL-2025-18178 Malicious code in default-debug (npm)
The package default-debug was found to contain malicious code...
MAL-2025-18143 Malicious code in debug-await-transpile-final-authorize (npm)
The package debug-await-transpile-final-authorize was found to contain malicious code...
MAL-2025-37580 Malicious code in uglify-debug-key-query-refactor (npm)
The package uglify-debug-key-query-refactor was found to contain malicious code...
Malicious code in deploy-assert-debug-short-reject (npm)
The package deploy-assert-debug-short-reject was found to contain malicious code...
Malicious code in default-debug (npm)
The package default-debug was found to contain malicious code...
brick (=0.0.0), brick-node (>=0.0.8 <=0.0.17) +20 more potentially affected by unknown CVE via default-debug (>=0.0.0 <=2.0.0)
default-debug NPM version =0.0.0, =0.0.8, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-18178...
Malicious code in debug-await-transpile-final-authorize (npm)
The package debug-await-transpile-final-authorize was found to contain malicious code...
brick (=0.0.0), brick-node (>=0.0.0 <=0.0.17) +34 more potentially affected by unknown CVE via local-debug (>=0.0.0 <=2.0.0)
local-debug NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.7, =0.0.0, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-25478...