Malicious code in mobile-user-info (npm)

The package mobile-user-info was found to contain malicious code...

Malicious code in cosmos-tokens-badoo-mobile (npm)

The package cosmos-tokens-badoo-mobile was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in reddit-mobile-plugin-metrics (npm)

The package reddit-mobile-plugin-metrics was found to contain malicious code...

Malicious code in elated-mobile (npm)

The package elated-mobile was found to contain malicious code...

Malicious code in lg-mutator-mobile-ads (npm)

The package lg-mutator-mobile-ads was found to contain malicious code...

MAL-2025-26619 Malicious code in molpay-mobile-sdk (npm)

The package molpay-mobile-sdk was found to contain malicious code...

MAL-2025-26556 Malicious code in mobile-user-info (npm)

The package mobile-user-info was found to contain malicious code...

MAL-2025-24335 Malicious code in kashable-mobile-common (npm)

The package kashable-mobile-common was found to contain malicious code...

MAL-2025-26555 Malicious code in mobile-share (npm)

The package mobile-share was found to contain malicious code...

MAL-2025-31304 Malicious code in quickstart-mobile-server (npm)

The package quickstart-mobile-server was found to contain malicious code...

MAL-2025-31922 Malicious code in reddit-mobile-plugin-ads (npm)

The package reddit-mobile-plugin-ads was found to contain malicious code...

MAL-2025-18145 Malicious code in debugger-for-ios-web (npm)

The package debugger-for-ios-web was found to contain malicious code...

Altus Cars Lotus Cars Android app 安全漏洞

Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...

Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6906 Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Schneider Electric EcoStruxure

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

Ivanti Avalanche SQL注入漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti for managing mobile devices such as smartphones and tablets. Ivanti Avalanche suffers from a SQL injection vulnerability that originates when the program does not properly validate user-entered SQL statements, which can...

The vulnerability of the DEVICE_PING command in the monitoring and control software for solar energy systems, Tigo Cloud Connect Advanced (CCA), allows a hacker to gain unauthorized access to protected information, execute arbitrary commands, or cause service interruptions.

The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...

CVE-2025-8749

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots MiR Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request...

CVE-2025-7769

Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this enables attackers to execute arbitrary...