PT-2025-31098 · Unknown · Bsc Peru Cocktails App

Fxizenta · Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-8275

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions bsc Peru Cocktails App version 1.0.0

Description A problematic issue has been identified in the application related to the improper export of Android application components due to manipulation of the AndroidManifest.xml file within the bsc.devy.peru cocktails component. The attack can be launched on the local host. The exploit has been publicly disclosed.

Recommendations Update to a newer version of bsc Peru Cocktails App that addresses the improper component export issue in the AndroidManifest.xml file.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-8275

Affected Products

Bsc Peru Cocktails App

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/bsc.devy.peru_cocktails.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8275 · Security Note
• https://twitter.com/VulmonFeeds/status/1949967395767935302 · Twitter Post
• https://twitter.com/CVEnew/status/1949824268365111663 · Twitter Post
• https://vuldb.com/?id.317864 · Note
• https://vuldb.com/?submit.623582 · Note
• https://vuldb.com/?ctiid.317864 · Note
• https://t.me/CVEtracker/28575 · Telegram Post