76 matches found
CVE-2025-56400
Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...
CVE-2025-56400: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...
CVE-2025-56400
Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...
Tuya多款产品 安全漏洞
Tuya Android SDK and others are products of Tuya China.Tuya Android SDK is a software development kit.Tuya iOS SDK is a software development kit.Tuya Smart App is a smart app. A security vulnerability exists in several Tuya products, which stems from an unvalidated state parameter in the OAuth...
CVE-2025-56400
A Cross-Site Request Forgery (CSRF) vulnerability exists in the OAuth implementation of the Tuya SDK version 6.5.0 for Android and iOS. This affects the Tuya Smart and Smartlife mobile applications, along with other third-party applications integrating the SDK. The root cause is a failure to vali...
PT-2025-47957
Name of the Vulnerable Software and Affected Versions Tuya SDK version 6.5.0 Tuya Smart application Smartlife application Description A Cross-Site Request Forgery CSRF issue exists in the OAuth implementation of the Tuya SDK. This affects the Tuya Smart and Smartlife mobile applications, as well ...
MAL-2025-155465 Malicious code in guras-tuya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efea36c11ffe8afe5ff4001cc8170cb130691437181e6256587c891190ab3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in guras-tuya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efea36c11ffe8afe5ff4001cc8170cb130691437181e6256587c891190ab3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
KERUI K259 5MP Wi-Fi / Tuya Smart 安全漏洞
KERUI K259 5MP Wi-Fi / Tuya Smart is a webcam from KERUI. A security vulnerability exists in KERUI K259 5MP Wi-Fi / Tuya Smart that originates from scanning the mounted TF/SD card at startup and executing a specific script, which could lead to code execution...
CVE-2025-63296: Improper Neutralization of Special Elements used in a Command
KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...
EUVD-2024-32337
Malicious code in bioql PyPI...
EUVD-2024-30086
Malicious code in bioql PyPI...
EUVD-2025-17312
Malicious code in bioql PyPI...
EUVD-2025-29640
Malicious code in bioql PyPI...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
CVE-2025-56557
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol...
PT-2025-38065
Name of the Vulnerable Software and Affected Versions Tuya Smart Life App versions 5.6.1 Description An issue discovered in the Tuya Smart Life App allows attackers to gain unprivileged control of Matter devices via the Matter protocol. Recommendations Update to a newer version of the Tuya Smart...