Disclosures

Disclosures This repository contains my vulnerability reports which aren't under an NDA or restricted by VRP terms of service. Contents Fancy Product Designer Microsoft Xfinity...

Wireless Routers as Motion Detectors

Comcast has added motion detection as a feature to its wireless routers: The feature sends push notifications to users when motion is detected near a connected device, such as a TV or printer. It has different settings for when people are home, asleep, or away. The Xfinity app also lets users see...

Xfinity Panel - Detect

Xfinity panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Xfinity panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Xfinity Panel - Detect', 'description': 'Xfinity panel was...

EUVD-2016-3482

Malware in sbrugna...

EUVD-2017-18407

Malware in sbrugna...

EUVD-2017-18430

Malware in sbrugna...

EUVD-2014-5634

Malware in sbrugna...

EUVD-2025-2909

Malicious code in bioql PyPI...

EUVD-2024-30462

Malicious code in bioql PyPI...

CVE-2024-32675

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2016-2398

Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions...

CVE-2025-22681

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through = 1.0.1...

CVE-2025-22681

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through = 1.0.1...

CVE-2024-32675

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2024-32675

CVE-2024-32675 represents a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin (wc-order-limit-lite). Affected versions are reported as up to 2.0.0. The connected Red Hat/Wordfence entries confirm the CVE ID and indicate the issue concerns missing authorization, but do ...

CVE-2024-32675 WordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

CVE-2024-32675: Missing Authorization

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0...

PT-2024-24760

Name of the Vulnerable Software and Affected Versions Order Limit for WooCommerce versions 2.0.0 and earlier Description A Missing Authorization issue has been identified. This issue affects the Xfinity Soft Order Limit for WooCommerce plugin. Recommendations For versions 2.0.0 and earlier, updat...

How to Opt Out of Comcast’s Xfinity Storing Your Sensitive Data

One of America’s largest internet providers may collect data about your political beliefs, race, and sexual orientation to serve personalized ads...

Xfinity Rocked with Data Breach Impacting 36 Million Users

By Deeba Ahmed The latest Xfinity data breach is linked to the critical Citrix Bleed vulnerability. This is a post from HackRead.com Read the original post: Xfinity Rocked with Data Breach Impacting 36 Million Users...