49 matches found
CVE-2024-46549
An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users...
PT-2024-32031 · Tp Link · Tp-Link Kasa Kp125M
Name of the Vulnerable Software and Affected Versions: TP-Link Kasa KP125M version 1.0.3 Description: An issue in the TP-Link MQTT Broker and API gateway allows attackers to establish connections by impersonating devices owned by other users. This impersonation can lead to unauthorized access...
PT-2024-32030 · Tp Link · Kasa Kp125M +1
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo P125M and Kasa KP125M version 1.0.3 Description: The issue allows attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack due to improper validation of certificates. Recommendation...
PT-2024-26517 · Tp Link · Tapo P125M +1
Name of the Vulnerable Software and Affected Versions: TP-Link Kasa KP125M version 1.0.0 Tapo P125M version 1.0.0 Build 220930 Rel.143947 Description: An Information Disclosure issue in the Telemetry component allows attackers to observe device state via observing network traffic. Recommendations...
kasa-it.com Improper Access Control vulnerability OBB-3802348
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Kasa camera flaw allows enumerating usernames for credential stuffing
By Sudais Asif The hacker who happens to be a hobbyist farmer and Kasa camera... This is a post from HackRead.com Read the original post: Kasa camera flaw allows enumerating usernames for credential stuffing...
Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack
A popular consumer-grade security camera made by TP-Link and sold under the Kasa brand has bevy of bugs that open the hardware to remote attacks, such as giving hackers access to private video feeds and the ability to change device settings. The researcher Jason Kent, with Cequence Security,...
Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability
Exploit for unknown platform in category local exploits...
Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability
Summary Deimos Kasa is a Windows restaurant management software. Description Deimos Kasa is prone to an integer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input in the table field. Successfully exploiting these issues may allow local attackers to...