Lucene search
+L

168 matches found

Kitploit
Kitploit
•added 2026/09/25 4:11 p.m.•12 views

CVE-2021-27289

🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...

6AI score0.00854EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 2:43 p.m.•12 views

blackbox-fuzzing

Fuzzing de caja negra de dispositivos IoT usando el router TL-WR902AC como ejemplo Esta es la versión HTML de mi trabajo académico, que se puede descargar como PDF aquí. Introducción El fuzzing se ha convertido en "una de las formas más eficaces" de encontrar errores en el software. Con esta o...

6.1AI score
SaveExploits0References6
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•65 views

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

10CVSS8.2AI score0.1755EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/09/25 2:05 a.m.•16 views

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

9.2CVSS7.5AI score0.02941EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/25 12:09 a.m.•9 views

mud-visualizer

制造商使用描述(MUD)可视化工具 警告:mud-visualizer 目前处于测试阶段,使用风险自负。 该工具可用于可视化 JSON 格式的 MUD 文件。 目录 动机 安装 支持的 MUD 抽象 贡献 支持 引用 许可证 动机 MUD 文件是包含设备 ACL 规则的 JSON 格式纯文本文件。一个 MUD 文件可能包含数十或数百条 ACL 规则,这使得手动阅读和验证文件变得困难。mud-visualizer 将帮助您阅读、验证(并在不久的将来修改)MUD 文件。 安装 使用以下命令安装并运行 mud-visualizer: root@kitploit: $ git clone...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 8:05 p.m.•14 views

CVE-2025-27840-WIP

CVE-2025-27840-WIP Un trabajo en curso para CVE-2025-27840 Resumen de CVE-2025-27840 CVE-2025-27840 es una vulnerabilidad de severidad media CVSS 6.8 que afecta a los chips Bluetooth ESP32 de Espressif, integrados en más de mil millones de dispositivos IoT a nivel mundial. La falla involucra 29...

6.8CVSS7.7AI score0.0133EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/22 5:55 p.m.•11 views

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | January 21, 2023 This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device, which can be controlled through a web interface this is typical for many IoT devices. Many IoT device...

8.8CVSS7.1AI score0.01565EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/22 5:21 p.m.•57 views

RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection Durante mi pasantía en Qi An Xin Tiangong Lab, descubrí una vulnerabilidad de inyección de comandos en el router RE11S1.11. Al analizar el archivo webs en el directorio bin, descubrí que la función formAccept contiene una vulnerabilidad de inyección de...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/21 8:09 a.m.•11 views

IoT_vuln

POC for TOTOLINK devices: TOTOLINK LR350: CVE-2024-10654 login bypass TOTOLINK T6: CVE-2025-6916 login bypass - for a deeper dive into this CVE, read more at: https://anduinbrian.github.io/posts/blogs/totolink-t6-v3/...

9.1CVSS6.7AI score0.01554EPSS
SaveExploits2References1
NVD
NVD
•added 2026/09/17 8:18 p.m.•16 views

CVE-2026-92943

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS0.00381EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/17 7:14 p.m.•52 views

CVE-2026-92943

AWS IoT Device SDK for Python versions 1.5.3 through 1.6.0 (Python 3.7+) contain an improper certificate validation flaw in the MQTT client TLS connection layer. An adversary-in-the-middle can present a certificate issued for an unrelated hostname by a CA already in the device trust store, thereb...

9.2CVSS6AI score0.00381EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/17 7:14 p.m.•12 views

CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS6AI score0.00381EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/17 7:14 p.m.•29 views

CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS6AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 7:14 p.m.•15 views

EUVD-2026-82378

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS6AI score0.00381EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/17 7:14 p.m.•41 views

CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS0.00381EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-92943: Improper Validation of Certificate with Host Mismatch

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...

9.2CVSS6AI score0.00381EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/31 3:33 p.m.•37 views

CVE-2026-77966 Ebyte NA111-M Missing Authorization

The affected Ebyte product does not provide separation between limited and administrative management functions. A low privileged authenticated attacker could access security sensitive configuration functions and modify settings that affect the confidentiality, integrity, or availability of the...

8.8CVSS0.00442EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•0 views

CVE-2026-29988: Cleartext Transmission of Sensitive Information

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5.8AI score0.00166EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/14 10:46 p.m.•12 views

MINI-RG49-H5RP-JFGR

Bulletin has no description...

4.9AI score0.00568EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2026/08/11 12:05 p.m.•27 views

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to take the whole device over. Researchers at the University of Birmingham an...

6AI score
SaveExploits0
Rows per page
Query Builder