Sploitus Multiple Exploits Targeting Android and Web Applications
Article Content
- •AndroTickler aids in Android app penetration testing with various features.
- •exposecheck identifies authentication vulnerabilities in Langflow related to CVE-2025-3248.
- •EXPLOITER automates exploitation of CVE-2024-0044, allowing unauthorized code execution.
A cluster of cybersecurity tools has emerged, targeting various vulnerabilities in Android and web applications. The tools include AndroTickler, designed for penetration testing of Android apps, and exposecheck, which checks for authentication vulnerabilities in the Langflow framework related to CVE-2025-3248. Additionally, EXPLOITER automates the exploitation of CVE-2024-0044, allowing attackers to bypass security checks on Android devices. CheatSheetSeries provides security best practices for developers, while Recon offers a reconnaissance framework for pentesting. The tools emphasize the importance of securing applications against known vulnerabilities, particularly CVE-2025-3248 and CVE-2024-0044, which have been publicly disclosed and are actively exploited. Security professionals are urged to assess their systems for these vulnerabilities and apply necessary mitigations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (100)
Following this threat?
Track Langflow and CVE-2018-7600 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Cisco Talos Reports Ongoing Sea Turtle DNS Hijacking Campaign Cisco Talos has identified a persistent cyber threat campaign named 'Sea Turtle' that manipulates DNS systems, primarily targeting national security organizations in the Middle East and North Africa. The campaign, which began as early as January 2017, has compromised at least 40 organizations across 13 countries.… 
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…