CVE-2019-25605
High · 7.5CVSS
7.5
EPSS
0.3%
Published
Mar 22, 2026
CISA due date
—
The record
EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing user account credentials.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-3660 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control… CWE-612
- CVE-2025-3654 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information… CWE-612
- CVE-2025-3653 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access… CWE-612