EUVD-2022-38947

Malicious code in bioql PyPI...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

Default credentials

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

CVE-2022-36228 affects Nokelock Smart padlock O1 version 5.3.0 with Insecure Permissions that allow sending a request to add any device and set the device password in the Nokelock app. Multiple connected sources corroborate the issue. Practical impact is elevated because an unauthenticated action...

PT-2023-13460 · Nokelock · Nokelock Smart Padlock O1 +1

Name of the Vulnerable Software and Affected Versions: Nokelock Smart padlock O1 version 5.3.0 Description: The issue allows an attacker to send a request and add any device, as well as set the device password in the Nokelock app, due to insecure permissions. Recommendations: For version 5.3.0,...

Nokelock Security Vulnerability

Nokelock is an application from Nokelock Inc. A security vulnerability exists in Nokelock Smart padlock O1 version 5.3.0 that stems from improper privilege management...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

Pwning the Nokelock API

Nokelock Vulnerabilities I’ve been talking at some Infosec meet ups about a certain padlock, called the Nokelock. I need to differentiate this right now as there is a product called nokē, this is not about that. This is about a set of Chinese made padlocks called Nokelock from a company called...

Nokelock APP suffers from an override access vulnerability

Nokelock APP is a mobile access control software. Nokelock APP suffers from an override access vulnerability. It allows an attacker to use proxy tools to tamper with packets to obtain sensitive user information...