Vulnerability Bulletins |
CVE-2025-63435 |
|
| Affected software | ANDROID |
| Xtooltech Xtool AnyScan Android Application 4.40.40 is Missing Authentication for Critical Function. The server-side endpoint responsible for serving update packages for the application does not require any authentication. This allows an unauthenticated remote attacker to freely download official update packages.. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-63435 | |