CVE-2025-50862 – Lotus Cars Android App Data Exfiltration Vulnerability

August 14, 2025

CVE ID : CVE-2025-50862

Published : Aug. 14, 2025, 8:15 p.m. | 4 hours, 6 minutes ago

Description : The Lotus Cars Android app (com.lotus.carsdomestic.intl) 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-51965 – OURPHP Cross-Site Scripting (XSS) Vulnerability

Next Article CVE-2025-50861 – Lotus Cars Android App Unauthenticated Access Vulnerability

Highlights

CVE-2025-2168 – Elementor Store Kit CSRF

May 1, 2025

CVE ID : CVE-2025-2168

Published : May 1, 2025, 4:16 a.m. | 3 hours, 55 minutes ago

Description : The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect nonce validation on the dismiss() function. This makes it possible for unauthenticated attackers to set arbitrary user meta values to `1` which can be leveraged to lock and administrator out of their site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Sentry launches MCP monitoring tool

10 Benefits of Hiring a React.js Development Company (2025–2026 Edition)

From Line To Layout: How Past Experiences Shape Your Design Career

Hire React.js Developers in the US: How to Choose the Right Team for Your Needs

I’ve tested every Samsung Galaxy phone in 2025 – here’s the model I’d recommend on sale

Google Photos just put all its best editing tools a tap away – here’s the shortcut

Claude can teach you how to code now, and more – how to try it

One of the best work laptops I’ve tested has MacBook written all over it (but it’s even better)

Controlling Execution Flow with Laravel’s Sleep Helper

Controlling Execution Flow with Laravel’s Sleep Helper

Generate Secure Temporary Share Links for Files in Laravel

This Week in Laravel: Filament 4, Laravel Boost, and Junie Review

KDE Plasma 6 on Wayland: the Payoff for Years of Plumbing

KDE Plasma 6 on Wayland: the Payoff for Years of Plumbing

FOSS Weekly #25.33: Debian 13 Released, Torvalds vs RISC-V, Arch’s New Tool, GNOME Perfection and More Linux Stuff

Ultimate ChatGPT-5 Prompt Guide: 52 Ideas for Any Task

CVE-2025-50862 – Lotus Cars Android App Data Exfiltration Vulnerability

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

From Banking Darling to $1B Fraud Magnet: Inside the Zelle Lawsuit 2025

CVE-2025-6624 – Snyk Log File Credential Exposure Vulnerability

CVE-2025-5205 – 1000 Projects Daily College Class Work Report Book SQL Injection Vulnerability

CVE-2025-20298 – Splunk Universal Forwarder Windows Privilege Escalation Vulnerability

DOJ charges 12 more in $263 million crypto fraud takedown where money was hidden in squishmallow stuffed animals

CVE-2025-2168 – Elementor Store Kit CSRF

CVE-2025-20968 – Samsung Gallery Unauthenticated Remote Code Execution

Rilasciato Incus 6.12: Novità per Container e Macchine Virtuali su GNU/Linux

New SSD just dropped — swallows Xbox Game Pass whole and dares your Steam backlog to challenge it

CVE-2025-50862 – Lotus Cars Android App Data Exfiltration Vulnerability

Related Posts