PT-2025-30196 · Unknown · Foresight News App

Fxizenta · Published 2025-07-20 · Updated 2025-07-21 · CVE-2025-7893

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foresight News App versions up to 2.6.4

Description A problematic issue exists in the Foresight News App related to the improper export of Android application components. The issue affects unknown code within the AndroidManifest.xml file of the pro.foresightnews.appa component. Local access is required for exploitation. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations Update Foresight News App to a version newer than 2.6.4.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-7893

Affected Products

Foresight News App

References · 12

• 🔥 https://github.com/KMov-g/androidapps/blob/main/pro.foresightnews.app.md · Exploit
• 🔥 https://github.com/KMov-g/androidapps/blob/main/pro.foresightnews.app.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7893 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7893 · Vendor Advisory
• https://vuldb.com/?ctiid.317008 · Note
• https://twitter.com/VulmonFeeds/status/1946943932123754730 · Twitter Post
• https://vuldb.com/?submit.615292 · Note
• https://twitter.com/CVEnew/status/1946932091565867519 · Twitter Post
• https://t.me/cvenotify/129679 · Telegram Post
• https://t.me/cvetracker/28269 · Telegram Post
• https://t.me/cvenotify/129606 · Telegram Post
• https://vuldb.com/?id.317008 · Note