211 matches found
EUVD-2024-31887
Malicious code in bioql PyPI...
EUVD-2024-53106
Malicious code in bioql PyPI...
EUVD-2024-53108
Malicious code in bioql PyPI...
EUVD-2025-29640
Malicious code in bioql PyPI...
EUVD-2024-32041
Malicious code in bioql PyPI...
EUVD-2024-53107
Malicious code in bioql PyPI...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
CVE-2025-56557 describes a vulnerability in Tuya Smart Life App version 5.6.1 that allows an attacker to unprivilegedly control Matter devices using the Matter protocol. The NVD entry lists a CVSS v3.1 base score of 9.1 (CRITICAL) with network attack vector, no user interaction required, and impa...
PT-2025-38065
Name of the Vulnerable Software and Affected Versions: Tuya Smart Life App versions 5.6.1 Description: An issue discovered in the Tuya Smart Life App allows attackers to gain unprivileged control of Matter devices via the Matter protocol. Recommendations: Update to a newer version of the Tuya Sma...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
Tuya Smart Life App 安全漏洞
Tuya Smart Life App is a smart home control app from Chinese company Tuya Tuya. A security vulnerability exists in Tuya Smart Life App version 5.6.1, which originates from an attacker being able to control the device without privileges via the Matter protocol...
MAL-2025-34141 Malicious code in sublimation-ionosphere-quasar-darkmatter (npm)
The package sublimation-ionosphere-quasar-darkmatter was found to contain malicious code...
CVE-2024-56318
In raw\TCP.cpp in Matter aka connectedhomeip or Project CHIP through 1.4.0.0 before 27ca6ec, there is a NULL pointer dereference in TCPBase::ProcessSingleMessage via TCP packets with zero messageSize, leading to denial of service...
CVE-2024-56317
In Matter aka connectedhomeip or Project CHIP through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by...
CVE-2024-56319
In Matter aka connectedhomeip or Project CHIP through 1.4.0.0 before e3277eb, unlimited user label appends in a userlabel cluster can lead to a denial of service resource exhaustion...
CVE-2023-22491
Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...
