127 matches found
CVE-2026-16581
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...
igloohome Smart Lock Mobile Application
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an unauthorized actor to access functions or backend services. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure...
CVE-2025-15474
AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy BLE range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad...
CVE-2025-15474 AuntyFey Smart Combination Lock BLE Connection Flood DoS
AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 contain a vulnerability that allows an unauthenticated attacker within Bluetooth Low Energy BLE range to cause a denial of service by repeatedly initiating BLE connections. Sustained connection attempts interrupt keypad...
CVE-2025-15474
CVE-2025-15474 affects AuntyFey Smart Combination Lock firmware (as of 2025-12-24). Affected component: BLE handling in the device, where an unauthenticated attacker in BLE range can repeatedly initiate connections to cause a denial of service by interrupting keypad authentication and forcing loc...
PT-2026-1557
Name of the Vulnerable Software and Affected Versions AuntyFey Smart Combination Lock firmware versions as of 2025-12-24 Description The AuntyFey Smart Combination Lock firmware is susceptible to a denial of service. An unauthenticated attacker within Bluetooth Low Energy BLE range can repeatedly...
AuntyFey Smart Combination Lock 安全漏洞
AuntyFey Smart Combination Lock is a smart padlock from AuntyFey. AuntyFey Smart Combination Lock has a security vulnerability that originates from an attacker being able to repeatedly initiate a BLE connection, which could lead to a denial of service attack...
EUVD-2019-4520
Malware in sbrugna...
EUVD-2016-7672
Malware in sbrugna...
EUVD-2019-7869
Malware in sbrugna...
EUVD-2016-2252
Malware in sbrugna...
EUVD-2023-38608
Malicious code in bioql PyPI...
EUVD-2022-35576
Malicious code in bioql PyPI...
EUVD-2021-31705
Malicious code in bioql PyPI...
EUVD-2022-35578
Malicious code in bioql PyPI...
EUVD-2022-35577
Malicious code in bioql PyPI...
EUVD-2022-35581
Malicious code in bioql PyPI...
EUVD-2022-35579
Malicious code in bioql PyPI...
CVE-2024-48548
The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulnerability allows attackers to arbitrarily construct a request to use the app to bind to unknown devices by finding a valid serial number via a bruteforce attack...