Linux kernel Start Power Clamp

The vulnerability of the startpowerclamp function in the drivers/thermal/intel/intelpowerclamp.c file of the Linux kernel temperature control driver is related to improper elimination of certain elements in the data sent to the client. Exploiting this vulnerability could allow an attacker to caus...

Linux kernel Thermal Probe

The vulnerability of the hi3660thermalprobe function in the drivers/thermal/hisithermal.c module of the Linux kernel’s temperature control driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

CVE-2025-56558: Unprotected Alternate Channel

The Dyson MQTT server 2022 and possibly later allows publications and subscriptions by a client that has the correct values of AWSACCESSKEYID, AWSSECRETACCESSKEY, AWSSESSIONTOKEN, and device serial number, even if a device such as a Pure Hot+Cool device has been removed and is not visible in the...

EUVD-2019-7195

Malware in sbrugna...

EUVD-2019-5004

Malware in sbrugna...

EUVD-2019-5008

Malware in sbrugna...

Efficient and Stealthy Jailbreak Attacks Via Adversarial Prompt Distillation from LLMs to SLMs

Attacks on large language models LLMs in jailbreaking scenarios raise many security and ethical issues. Current jailbreak attack methods face problems such as low efficiency, high computational cost, and poor cross-model adaptability and versatility, which make it difficult to cope with the rapid...

CVE-2019-13553

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download Vulnerability

ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated configuration download vulnerability. This can be exploited to download the CSV DB that contains the configuration mappings information via the VMobileImportExportServlet by directly calling the vstatConfigurationDownload.php script...

Design/Logic Flaw

The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol udp/1024 commands interfacing directly with the target device. This, in turn, allows for...

GUI temperature control software Configuration File Error

The vulnerability of GUI temperature control software is related to errors in processing configuration files .gd1. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...

GUI temperature control software Buffer Overflow

The vulnerability of GUI temperature control software relates to the possibility of writing beyond the buffer boundaries when processing configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

GUI temperature control software Memory Use After Free

The vulnerability of GUI temperature control software relates to the use of memory after release, during the processing of configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

is designed for calculating Code Execution

The vulnerability of the software is designed for calculating and selecting devices that control the temperature settings of ProClima. This vulnerability is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ProClima Buffer Overflow Code Execution

The vulnerability of the software is designed for calculating and selecting devices that can control the temperature settings of ProClima. This vulnerability is related to the operation of the function that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker t...

Heat Metering and Temperature Control Integration Analysis System suffers from SQL Injection Vulnerability

Shandong Lichuang Technology Co., Ltd, founded in 2001, is a national key high-tech enterprise integrating R&D, production and sales of series of ultrasonic water meters, ultrasonic flow meters, ultrasonic heat meters, smart meters and other energy measuring instruments and intelligent management...

Heat Measurement and Temperature Control Integration Analysis System of Shandong Lichuang Technology Co.

Shandong Lichuang Technology Co., Ltd. heating measurement and temperature control integrated analysis system is a data analysis system designed with energy saving, consumption reduction and cost saving as the starting point according to the current guiding direction of energy saving and emission...

CVE-2019-13553: Use of Hard-coded Credentials

Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 – B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely...

CVE-2019-16518

An issue was discovered on Swell Kit Mod devices that use the Vandy Vape platform. An attacker may be able to trigger an unintended temperature in the victim's mouth and throat via Bluetooth Low Energy BLE packets that specify large power or voltage values...

A Secure “Smart” Kettle?

We haven’t looked at smart kettles for a long time, mostly as the UK market leader, Smarter, fixed their security with the iKettle 3.0. So I got quite excited when a colleague pointed out the Xiaomi ‘smart’ kettle a few weeks back. It’s the first kettle with a mobile app that we’ve seen for a...