NoLongerEvil-Thermostat

Configurazione Firmware Nest Thermostat 🏆 Vincitore del FULU Bounty 🏆 Hack House e questo progetto sono i vincitori ufficiali del FULU Bounty per Nest Learning Thermostat Gen 1/2 Alternativa Hardware: Se sei interessato al lato hardware, dai un'occhiata a https://sett.homes per un'opzione di...

core

Secluso Sicurezza domestica fai-da-te per Raspberry Pi, con accesso remoto crittografato e configurazione software in 5 minuti. Scarica Secluso Deploy • Guida per costruire il tuo • Modello di sicurezza • Sito web Secluso è un sistema di telecamere di sicurezza domestica privato per Raspberry Pi...

espectre

🛜 ESPectre 👻 Bewegungserkennungssystem basierend auf Wi-Fi-Spektrumanalyse CSI, mit nativer Home-Assistant-Integration über ESPHome. !TIP Neuer ML-Detektor : Bewegungserkennung auf Basis neuronaler Netze. Keine Kalibrierung erforderlich, läuft auf dem Gerät. Dies ist eine experimentelle Funktion;...

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-75960 Insufficiently Protected Credentials in Rently Smart Home

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

CVE-2026-75960

Rently Smart Home versions 20.1.0 and prior are affected by an Insufficiently Protected Credentials vulnerability that allows an attacker to retrieve PINs, including the Master Pin , thereby overriding standard user permissions. CISA rates this HIGH severity (CVSS 3.1: 8.1, CVSS 4.0: 8.7) with a ...

CVE-2020-27199

CVE-2020-27199 Magic Home Pro - Bypass dell'autenticazione Multiple vulnerabilità trovate nell'applicazione mobile Magic Home Pro utilizzata per interfacciarsi con il kit LED Strip RGB JadeHomic. La più significativa di queste vulnerabilità è un bypass dell'autenticazione CVE-2020-27199, che...

CVE-2018-10562

CVE-2018-10562 CVE-2018-10562 exploit Sobre RCE em roteadores domésticos GPON CVE-2018-10561: Bypass de Autenticação CVE-2018-10562: Injeção de Comando Dependências necessárias requests urllib2 ssl re Capturas de tela...

CVE-2023-42179

Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control through its key derivation process and password validation process. This could allow unauthorized parties to gain access to the device by exploiting weaknesses in how keys are derived or passwords are validated. N...

PT-2026-82102

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description An issue involving insufficiently protected credentials allows an attacker to retrieve pins, including the Master Pin. This enables the override of standard user permissions across IoT...

PT-2026-82228

Name of the Vulnerable Software and Affected Versions Bird Home Automation GmbH D1101V-F 000140 affected versions not specified Description Incorrect access control exists due to flaws in the key derivation process and the password validation process. Recommendations At the moment, there is no...

gardyn

Riepilogo A febbraio 2025 ho condotto una ricerca di sicurezza su un dispositivo Gardyn Home 4.0. Durante la mia ricerca, ho scoperto molteplici vulnerabilità e pratiche di sicurezza scadenti. Sfruttando queste vulnerabilità, un aggressore potrebbe ottenere accesso a livello di sistema a un...

gardyn-hack

Zusammenfassung Im Februar 2025 führte ich Sicherheitsforschung an einem Gardyn Home 4.0 Gerät durch. Während meiner Forschung entdeckte ich mehrere Schwachstellen und schlechte Sicherheitspraktiken. Durch Ausnutzung dieser Schwachstellen könnte ein Angreifer Systemzugriff auf ein Gardyn-Gerät...

cybersecurity-home-lab-btp

🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...

Rently Smart Home

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

Pingpon-Exploit

PINGPON EXPLOIT Autore: @037 Pingpon è uno strumento utilizzato per ottenere migliaia di router domestici GPON vulnerabili tramite Shodan.io per poi eseguire qualsiasi comando Linux su di essi utilizzando una falla di esecuzione di codice remoto CVE-2018-10562. DISCLAIMER NON sono responsabile pe...

CVE-2026-65610

A flaw was found in nnn. This vulnerability arises from a numeric truncation error where the system incorrectly handles HOME path lengths exceeding 255 characters. An attacker, by manipulating the victim's execution environment, can provide a specially crafted HOME path. This manipulation causes...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 Multiple XSS Memorizzate Autore: Sergio Descrizione: Rite CMS 3.0 è affetto da una vulnerabilità multipla di Cross-Site scripting XSS memorizzato che consente agli attaccanti di eseguire codice arbitrario tramite un payload creato nei campi della Home Page nel menu di Amministrazion...

Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app that used persistent directories could access and write files outside of its usual access rights, which constituted an attack on integrity and...