CVE-2025-9674

MITTEL 5.5CVE-2025-9674 · Published 29/08/2025 · updated 18/10/2026

Kurz gesagt

CVE-2025-9674 ist eine Schwachstelle (MITTEL (CVSS 5.5)) in scooper news (transbyte).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.29%, höher als bei 21.6% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
scooper news transbyte	`≤ 1.2`	No fix yet

Description

A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. This manipulation causes improper export of android application components. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

KMov-g/androidapps · Exploit
KMov-g/androidapps · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free