CVE-2023-31761

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31762

Summary: CVE-2023-31762 concerns the Digoo DG-HAMB Smart Home Security System (v1.0) and its transmitter. The core issue is a weak security design in the transmitter that enables a code replay attack, which could let an attacker gain full system access. The affected component is the transmitter; ...

CVE-2023-31763

CVE-2023-31763 affects the AGShome Smart Alarm v1.0 transmitter. The vulnerability stems from weak security in the transmitter, enabling a code replay attack that could give an attacker full access to the system. The NVD/CVE records indicate a base score of 7.5 (HIGH) with AV:A, AC:H, PR:N, UI:N,...

Smart School v1.0 - SQL Injection

Exploit Title: Smart School v1.0 - SQL Injection Date: 2023-05-17 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://codecanyon.net/item/smart-school-school-management-system/19426018 Demo Site: https://demo.smart-school.in Tested on: Kali Linux CVE: N/A Request POST /course/filterRecords/ HTTP/1....

CVE-2023-31762

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access to the system via a code replay attack...

CVE-2023-31763

Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a code replay attack...

PT-2023-23456 · Unknown · Agshome Smart Alarm

Name of the Vulnerable Software and Affected Versions: AGShome Smart Alarm version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For AGShome Smart Alarm version 1.0, consid...

PT-2023-23455 · Digoo · Digoo Dg-Hamb Smart Home Security System

Name of the Vulnerable Software and Affected Versions: Digoo DG-HAMB Smart Home Security System version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For Digoo DG-HAMB Smar...

Digoo DG-HAMB Smart Home Security System 安全漏洞

The Digoo DG-HAMB Smart Home Security System is a suite of smart home security alarm systems from Digoo. A security vulnerability exists in the Digoo DG-HAMB Smart Home Security System v1.0 firmware version, which stems from a vulnerability that allows an attacker to gain full access, where the...

Upgraded Q -> 2 from #42 [1684786437801]

Judge has assessed an item in Issue 42 as 2 risk. The relevant finding follows: While the "division before multiplication" issues described in M-01 have been mitigated in the proposed changeset, there are other cases which should be addressed too. Technical Details In SafEth::stake the calculatio...

Vulnerability of EVlink City’s parking charging station software. EVlink Parking and EVlink Smart Wallbox are vulnerable due to the lack of measures taken to protect the website structure, allowing attackers to impersonate users who control the charging stations.

Vulnerability of EVlink City parking charging stations’ software. The existence of EVlink Parking and EVlink Smart Wallbox stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to impersonate a user controlling the...

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox, which allow violators to gain unauthorized access to the charging station’s web server.

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox are associated with insufficient entropy. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to the charging station’s web server...

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox, which rely on rigidly encoded credentials, allow intruders to obtain unauthorized administrative privileges.

Vulnerability of EVlink City parking charging station software. EVlink Parking and EVlink Smart Wallbox utilize strict encoding for user data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized administrative privileges...

WordPress Smart App Banner Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smart App Banner Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-33315 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1486e25e9154 Credits Yuki Haruma Requir...

Smart App Banner < 1.1.2 - Cross-Site Request Forgery (CSRF)

The plugin does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to perform actions on their behalf by tricking a logged in user to submit a crafted request...

Default credentials

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This applies to contracts compiled with vyper version...

CVE-2023-32675

CVE-2023-32675 affects Vyper prior to 0.3.8. In contracts with more than one regular nonpayable function, funds could be sent to the default function even if it is nonpayable due to an early calldatasize check, as described in public advisories. The issue was fixed by removing the global calldata...

CVE-2023-32675 Nonpayable default functions are sometimes payable in vyper

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This applies to contracts compiled with vyper version...

CVE-2023-32675 Nonpayable default functions are sometimes payable in vyper

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This applies to contracts compiled with vyper version...

CVE-2023-32675 Nonpayable default functions are sometimes payable in vyper

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This applies to contracts compiled with vyper version...