EUVD-2025-202623

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor...

EUVD-2025-202619

The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were locate...

CVE-2025-65825

The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and...

CVE-2025-65823

The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor...

CVE-2025-65825

The CVE-2025-65825 entry affects Meatmeet basestation firmware where the firmware image is not encrypted. The root cause is unencrypted firmware dumping via UART after physical access, enabling an attacker to extract the firmware and access credentials stored in the NVS partition for current and ...

Meatmeet Pro BBQ Thermometer 安全漏洞

Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in the Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from the inclusion of hard-coded Wi-Fi credentials in the firmware, which could lead to unauthorized network access...

PT-2025-43061

Name of the Vulnerable Software and Affected Versions Ghost Robotics Vision 60 version 0.27.2 Description The Ghost Robotics Vision 60 APK version 0.27.2 contains exposed encrypted WiFi and SSH credentials. An attacker can connect to the robot’s WiFi network and access all its data, as the system...

EUVD-2016-10165

Malware in sbrugna...

EUVD-2025-32193

Malicious code in bioql PyPI...

EUVD-2025-25514

Malicious code in bioql PyPI...

CVE-2025-59409

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials testflck stored in cleartext in production firmware...

CVE-2025-59409

CVE-2025-59409 affects Flock Safety Falcon and Sparrow License Plate Readers (OPM1.171019.026). Root cause: development Wi‑Fi credentials stored in cleartext within production firmware, e.g., credentials like test_flck/test_flck. Impact: potential unauthorized device access. Public sources (PTSec...

CVE-2025-59409

Flock Safety Falcon and Sparrow License Plate Readers OPM1.171019.026 ship with development Wi-Fi credentials testflck stored in cleartext in production firmware...

CVE-2025-55297

ESF-IDF is the Espressif Internet of Things IOT Development Framework. The BluFi example bundled in ESP-IDF was vulnerable to memory overflows in two areas: Wi-Fi credential handling and Diffie–Hellman key exchange. This vulnerability is fixed in 5.4.1, 5.3.3, 5.1.6, and 5.0.9...

CVE-2025-55297

CVE-2025-55297 affects the ESP-IDF BluFi example in the Espressif IoT Development Framework (ESF-IDF). The issue is described as memory overflows in two areas: Wi‑Fi credential handling and Diffie–Hellman key exchange, with fixes released in ESP-IDF versions 5.4.1, 5.3.3, 5.1.6, and 5.0.9. Affect...

PT-2025-34229

Name of the Vulnerable Software and Affected Versions: ESP-IDF versions prior to 5.0.9 ESP-IDF versions 5.0.0 through 5.0.8 ESP-IDF versions 5.1.0 through 5.1.5 ESP-IDF versions 5.3.0 through 5.3.2 ESP-IDF versions 5.4.0 through 5.4.0 Description: The Espressif Internet of Things IOT Development...

CVE-2025-55280

CVE-2025-55280 (ZKTeco WL20) : The device stores Wi‑Fi credentials, configuration data, and system data in plaintext inside its firmware. An attacker with physical access could extract the firmware, reverse‑engineer binaries, and read the sensitive data, potentially gaining unauthorized network a...

CVE-2025-55280 Information Disclosure Vulnerability in ZKTeco WL20

This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the...

The vulnerability of TP-Link Tapo H200 smart home control software, related to the storage of information in an open manner, allows a intruder to obtain Wi-Fi credentials.

The vulnerability of TP-Link Tapo H200 smart home control software relates to the storage of information in an open manner. Exploiting this vulnerability could allow a intruder to obtain Wi-Fi credentials...

CVE-2024-46437

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.81625 web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a special...