Malicious Package

Overview @santieich/homebridge-midea-lan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11226 Malicious code in @santieich/homebridge-midea-lan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c707aceedcdd649d0eb71ffd5a1d4ad46f43886869acb7be92d8a14012eb69db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2024-53477

Malicious code in bioql PyPI...

CVE-2024-56972

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56972

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

PT-2025-3372 · Midea · Midea Home

Name of the Vulnerable Software and Affected Versions: Midea Home version 9.3.12 Description: The issue allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.12, consider avoiding the use of crafted links until a patch is available. A...

Midea Home security vulnerabilities

Midea Home is a smart home software from the Chinese company Midea Midea. A security vulnerability exists in Midea Home version 9.3.12, which originates from an attacker being able to obtain sensitive user information by providing a carefully crafted link...

CVE-2024-56972

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56972

The Midea Home smart home software, specifically version 9.3.12 on iOS, contains a security vulnerability that allows an attacker to access sensitive user information . This is achieved by supplying a crafted link , which is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 ...

CVE-2024-56972

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56972: URL Redirection to Untrusted Site

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

io.github.gpeng-worldvalue:fyble-midea-library (1.0.0) potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.7)

mysql:mysql-connector-java MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - io.github.gpeng-worldvalue:fyble-midea-library 1.0.0 Source cves: CVE-2023-22102 Source advisory:...

io.github.gpeng-worldvalue:fyble-midea-library (1.0.0) potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (5.0.7)

mysql:mysql-connector-java MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - io.github.gpeng-worldvalue:fyble-midea-library 1.0.0 Source cves: CVE-2018-3258 Source advisory:...

io.github.gpeng-worldvalue:fyble-midea-library (1.0.0) potentially affected by CVE-2022-21363 via mysql:mysql-connector-java (5.0.7)

mysql:mysql-connector-java MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - io.github.gpeng-worldvalue:fyble-midea-library 1.0.0 Source cves: CVE-2022-21363 Source advisory:...

Denial of Service Vulnerability in Meijer's Meijer App

Midea Home App is the official app of Midea Group for consumers, and it is also the smart home appliance management app based on M-Smart system. A denial of service vulnerability exists in Midea Home App, which can be exploited by attackers to cause the app to stop running...

io.github.gpeng-worldvalue:fyble-midea-library (1.0.0) potentially affected by CVE-2019-2692 via mysql:mysql-connector-java (5.0.7)

mysql:mysql-connector-java MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - io.github.gpeng-worldvalue:fyble-midea-library 1.0.0 Source cves: CVE-2019-2692 Source advisory:...

Midea Smart - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Midea Smart published at the 'play' market has multiple vulnerabilities...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...