PT-2025-40947

Name of the Vulnerable Software and Affected Versions YoSmart YoLink Smart Hub firmware version 0382 Description The YoSmart YoLink Smart Hub firmware version 0382 is unencrypted. Data extracted from the device can be used to determine network access credentials. Recommendations At the moment,...

CVE-2025-59448

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

CVE-2025-59448

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

CVE-2025-59450

The CVE-2025-59450 entry concerns YoSmart YoLink Smart Hub firmware 0382 (unencrypted). The documented impact is that data extracted from the device could be used to determine network access credentials, exposing confidentiality. No exploitation details are provided in the supplied documents. Rem...

$20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk

Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now...

WordPress yolink Search Plugin <= 2.5 - Cross-Site Scripting

This plugin is prone to a cross site scripting vulnerability via "s" parameter. Solution Update the plugin...

WordPress yolink Search plugin <= 1.1.4 - SQL Injection

No description provided by source. Exploit Title: WordPress yolink Search plugin = 1.1.4 SQL Injection Vulnerability Date: 2011-08-30 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/yolink-search.1.1.4.zip Version: 1.1.4 tested...

WordPress Yolink Search 1.1.4 SQL Injection

Exploit Title: WordPress yolink Search plugin getresults $wpdb-prepare "SELECT ID,GUID FROM $wpdb-posts WHERE poststatus='publish' AND posttype IN $posttypein AND ID $idfrom order by ID asc LIMIT $batchsize" ; //misusage of $wpdb-prepare :...

WordPress yolink Search Plugin <= 1.1.4 - SQL Injection

This WordPress yolink Search plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin yolink Search 1.1.4 - SQL Injection

Exploit Title: WordPress yolink Search plugin getresults $wpdb-prepare "SELECT ID,GUID FROM $wpdb-posts WHERE poststatus='publish' AND posttype IN $posttypein AND ID $idfrom order by ID asc LIMIT $batchsize" ; //misusage of $wpdb-prepare :...