CVE-2019-25605 — EquityPandit 1.0 Insecure Logging Information Disclosure
EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bri…
Published: 2026-03-22 · CVSS: 8.7 · CVSS 4.0
EquityPandit 1.0 contains an insecure logging vulnerability that allows attackers to capture sensitive user credentials by accessing developer console logs via Android Debug Bridge. Attackers can use adb logcat to extract plaintext passwords logged during the forgot password function, exposing user account credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7