Play vulnerabilities
Published CVEs affecting Play products: 1 record(s), with severity, exploitation and fixes.
CVE-2019-25605
High · 7.5
CWE-612 Mar 22, 2026
EquityPandit 1.0 Insecure Logging Information Disclosure
EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing user account credentials.