CVE-2025-9676 NCSOFT Universe App com.ncsoft.universeapp AndroidManifest.xml improper export of android application components

A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft.universeapp. The manipulation leads to improper export of android application components. Local access is required to approach this attack...

CVE-2025-9676 NCSOFT Universe App com.ncsoft.universeapp AndroidManifest.xml improper export of android application components

A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft.universeapp. The manipulation leads to improper export of android application components. Local access is required to approach this attack...

CVE-2025-9674 Transbyte Scooper News App com.hatsune.eagleee AndroidManifest.xml improper export of android application components

A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. This manipulation causes improper export of android application components. The attack requires loca...

CVE-2025-9674

CVE-2025-9674 affects Transbyte Scooper News App (versions up to 1.2) on Android. The vulnerability stems from manipulation of AndroidManifest.xml within the com.hatsune.eagleee component causing improper export of Android components. Attack requires local access and the exploit has been publishe...

CVE-2025-9674 Transbyte Scooper News App com.hatsune.eagleee AndroidManifest.xml improper export of android application components

A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. This manipulation causes improper export of android application components. The attack requires loca...

CVE-2025-56577

An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys...

CVE-2025-9673

The CVE-2025-9673 entry concerns Kakao Hey Kakao App for Android (up to version 2.17.4) and affects the com.kakao.i.connect AndroidManifest.xml. The root cause is an improper export of Android components within the AndroidManifest.xml, enabling a local attack vector. Public exploitation is report...

CVE-2025-44015 HybridDesk Station

A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network access, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.18 and later...

CVE-2025-39246

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-48979

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access...

PT-2025-35171

Name of the Vulnerable Software and Affected Versions: HikCentral FocSign affected versions not specified Description: An unquoted service path vulnerability exists in HikCentral FocSign. This could allow an authenticated user to potentially escalate privileges via local access. Recommendations: ...

PT-2025-35311

Name of the Vulnerable Software and Affected Versions: Transbyte Scooper News App versions up to 1.2 Description: A flaw exists in Transbyte Scooper News App up to version 1.2 on Android, related to improper export of android application components due to manipulation of the AndroidManifest.xml...

PT-2025-35320

Name of the Vulnerable Software and Affected Versions: NCSOFT Universe App versions up to 1.3.0 Description: A vulnerability exists due to improper export of android application components within the AndroidManifest.xml file of the com.ncsoft.universeapp component. Local access is required for...

CVE-2025-48979

An Improper Input Validation in UISP Application could allow a Command Injection by a malicious actor with High Privileges and local access...

CVE-2025-48979

CVE-2025-48979 refers to an improper input validation in the UISP Application that could enable a command injection. The vulnerability is described as exploitable by a malicious actor with high privileges and local access, potentially allowing arbitrary command execution within the application's ...

CVE-2025-9577

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...

CVE-2025-9577

TOTOLINK X2000R (firmware up to 2.0.0) contains a vulnerability in the Administrative Interface where an unknown function in /etc/shadow.sample can lead to default credential usage. Local access is required; exploitation is described as difficult, but the exploit has been released publicly and ma...

CVE-2025-9576

CVE-2025-9576 concerns Seeedstudio ReSpeaker LinkIt7688, where an Administrative Interface function handling the file "/etc/shadow" can be manipulated to enable default-credential use. Exploitation requires local access and is described as high-complexity with low exploitability in the public mat...

CVE-2025-9195

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service...

PT-2025-35143

Name of the Vulnerable Software and Affected Versions Cudy WR1200EA version 2.3.7-20250113-121810 Description A vulnerability exists in Cudy WR1200EA that allows for the use of a default password. The issue affects an unknown function within the /etc/shadow file. Exploitation requires local acces...