PT-2025-35308 · Unknown · Uab Paytend App

Fxizenta · Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-9671

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions UAB Paytend App versions up to 2.1.9

Description A weakness exists in UAB Paytend App that can lead to improper export of Android application components. The issue impacts an unknown function of the AndroidManifest.xml file within the com.passport.cash component. The attack requires local execution. The exploit has been publicly released. The vendor was notified but did not respond.

Recommendations Update UAB Paytend App to a version later than 2.1.9.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9671

Affected Products

Uab Paytend App

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/com.passport.cash.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9671 · Security Note
• https://github.com/KMov-g/androidapps/blob/main/com.passport.cash.md · Note
• https://vuldb.com/?ctiid.321881 · Note
• https://t.me/CVEtracker/31282 · Telegram Post
• https://twitter.com/CVEnew/status/1961516841806737716 · Twitter Post
• https://vuldb.com/?id.321881 · Note
• https://vuldb.com/?submit.637922 · Note