CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

EUVD-2025-36692

An issue discovered in Dyson App v6.1.23041-23595 allows unauthenticated attackers to control other users' Dyson IoT devices remotely via MQTT...

EUVD-2019-7126

Malware in sbrugna...

EUVD-2020-20196

Malware in sbrugna...

EUVD-2014-3416

Malware in sbrugna...

CVE-2025-59449

The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affected devices if the attacker obtains the associated device IDs. Because YoLink device IDs are predictable, an attacke...

EUVD-2025-4125

Malicious code in bioql PyPI...

EUVD-2023-25358

Malicious code in bioql PyPI...

EUVD-2022-55371

Malicious code in bioql PyPI...

EUVD-2024-53598

Malicious code in bioql PyPI...

EUVD-2024-16109

Malicious code in bioql PyPI...

EUVD-2025-13609

Malicious code in bioql PyPI...

EUVD-2025-4127

Malicious code in bioql PyPI...

EUVD-2025-23787

Malicious code in bioql PyPI...

EUVD-2024-53595

Malicious code in bioql PyPI...

CVE-2025-47324

Information disclosure while accessing and modifying the PIB file of a remote device via powerline...

CVE-2025-47324

Information disclosure while accessing and modifying the PIB file of a remote device via powerline...

PT-2025-32141

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon QCA7005 affected versions not specified Description: The vulnerability allows information disclosure while accessing and modifying the PIB file of a remote device via powerline communication. Recommendations: At the moment...

The vulnerability of the websGetVar function in the /goform/set_manpwd file of the LB-LINK microprogramming system allows a hacker to gain full control over the device.

The vulnerability of the websGetVar function in the /goform/setmanpwd file of the LB-LINK microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow a malicious actor, operating...

The vulnerability of the UnlockOpcSettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.

The vulnerability of the UnlockOpcSettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass...