CVE-2025-9671— UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application components
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-9671
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application components
Source: NVD (National Vulnerability Database)
Vulnerability Description
A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.passport.cash. Executing manipulation can lead to improper export of android application components. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-926
Source: NVD (National Vulnerability Database)
Vulnerability Title
UAB Paytend App 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
UAB Paytend App是UAB Paytend公司的一款银行移动应用程序。 UAB Paytend App 2.1.9及之前版本存在安全漏洞，该漏洞源于文件AndroidManifest.xml中组件导出不当，可能导致本地攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| UAB | Paytend App | 2.1.0 | - |
II. Public POCs for CVE-2025-9671
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-9671
请登录查看更多情报信息。
News · 1
IV. Related Vulnerabilities
Same weakness: CWE-926
- CVE-2026-44279
Fortinet FortiTokenAndroid 安全漏洞 - CVE-2026-3291
Samsung Print Service Plugin – Potential Information Disclos - CVE-2025-15464
KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Acces - CVE-2025-14517
Yalantis uCrop AndroidManifest.xml UCropActivity improper e - CVE-2025-10722
SKTLab Mukbee App com.dw.android.mukbee AndroidManifest.xml
V. Comments for CVE-2025-9671
No comments yet