Lucene search
+L

16 matches found

Kitploit
Kitploit
•added 2026/10/29 7:40 p.m.•20 views

CVE-2025-15474

BLE Smart Lock Denial-of-Service DoS Vulnerability An unauthenticated Bluetooth Low Energy BLE connection flood can reliably prevent legitimate users from unlocking the device by interrupting keypad input and forcing repeated lockout states. 📌 Summary This repository documents a Denial-of-Service...

5.3CVSS6.3AI score0.00326EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-38947

Malicious code in bioql PyPI...

7.3CVSS6.7AI score0.00356EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:08 p.m.•18 views

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

7.3CVSS6.6AI score0.00356EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/09 9:15 p.m.•42 views

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

7.3CVSS6.5AI score0.00356EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/09 9:15 p.m.•26 views

Default credentials

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

3.3CVSS6.5AI score0.00356EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2023/10/09 12:00 a.m.•84 views

CVE-2022-36228

The Nokelock Smart padlock O1 (Version 5.3.0) is vulnerable to Insecure Permissions due to improper privilege management. An attacker can send a request to the Nokelock app to add any device and set the device password. As a temporary workaround, users should avoid using the Nokelock app to add n...

7.3CVSS6.5AI score0.00356EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/09 12:00 a.m.•18 views

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

7.2AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/09 12:00 a.m.•58 views

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

6.7AI score0.00356EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•9 views

CVE-2022-36228: Missing Authorization

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

7.3CVSS6.7AI score0.00356EPSS
SaveExploits0References2
CNVD
CNVD
•added 2020/03/06 12:00 a.m.•14 views

Unauthorized Access Vulnerability in O1 Smart Padlock of Shenzhen IOT Lock Technology Co.

O1 smart padlock produced by Shenzhen IOT Lock Technology Co., Ltd. is a smart lock that can be unlocked via Bluetooth using cell phone APP. Ltd. O1 smart padlock has an unauthorized access vulnerability that can be exploited by an attacker to remotely unlock the lock by replaying the user's unlo...

6.8AI score
SaveExploits0
Prion
Prion
•added 2019/06/11 6:29 p.m.•20 views

Authentication flaw

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

4.3CVSS4.4AI score0.01588EPSS
SaveExploits2References2Affected Software2
CVE
CVE
•added 2019/06/11 5:43 p.m.•122 views

CVE-2019-11334

The CVE-2019-11334 issue is an authentication bypass in the Tzumi Electronics Klic Lock ecosystem. The vulnerability affects the Klic Lock mobile app (version 1.0.9) and the Klic Smart Padlock (Firmware 6.2). Attackers can exploit capture-replay of website POST requests to access resources that s...

4.3CVSS4.4AI score0.01588EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2019/06/11 5:43 p.m.•48 views

CVE-2019-11334

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

4.3AI score0.01588EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/11 12:00 a.m.•11 views

CVE-2019-11334: Authentication Bypass by Capture-replay

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

4.3CVSS5.8AI score0.01588EPSS
SaveExploits2References2
Trellix
Trellix
•added 2019/02/25 12:00 a.m.•23 views

What’s in the Box?

ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...

7.5AI score
SaveExploits0
Trellix
Trellix
•added 2019/02/25 12:00 a.m.•27 views

What’s in the Box?

ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...

7.5AI score
SaveExploits0
Rows per page
Query Builder