CVE-2025-15474

BLE 智能锁拒绝服务（DoS）漏洞 未经认证的蓝牙低功耗（BLE）连接洪泛攻击可以可靠地阻止合法用户解锁设备，方法是中断键盘输入并强制反复进入锁定状态。 📌 摘要 本仓库记录了一个影响商用 BLE 智能挂锁的拒绝服务（DoS）漏洞 （亚马逊商品）。 该设备公开一个静态 BLE MAC 地址（无 RPA）并接受未经认证的连接尝试。 通过循环反复发起 BLE 连接，攻击者可以干扰锁具的键盘认证流程，阻止用户完成 PIN 码输入。 此行为并非由错误的密码尝试导致 —— 用户在被强制进入锁定状态之前，没有足够的时间输入 PIN 码。 🔥 影响 ❌ 阻止合法用户解锁设备 ⛔ 键盘在输入过程中无响...

EUVD-2022-38947

Malicious code in bioql PyPI...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

Default credentials

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

The Nokelock Smart padlock O1 (Version 5.3.0) is vulnerable to Insecure Permissions due to improper privilege management. An attacker can send a request to the Nokelock app to add any device and set the device password. As a temporary workaround, users should avoid using the Nokelock app to add n...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

CVE-2022-36228: Missing Authorization

Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any device and set the device password in the Nokelock app...

Unauthorized Access Vulnerability in O1 Smart Padlock of Shenzhen IOT Lock Technology Co.

O1 smart padlock produced by Shenzhen IOT Lock Technology Co., Ltd. is a smart lock that can be unlocked via Bluetooth using cell phone APP. Ltd. O1 smart padlock has an unauthorized access vulnerability that can be exploited by an attacker to remotely unlock the lock by replaying the user's unlo...

Authentication flaw

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

CVE-2019-11334

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

CVE-2019-11334

The CVE-2019-11334 issue is an authentication bypass in the Tzumi Electronics Klic Lock ecosystem. The vulnerability affects the Klic Lock mobile app (version 1.0.9) and the Klic Smart Padlock (Firmware 6.2). Attackers can exploit capture-replay of website POST requests to access resources that s...

CVE-2019-11334: Authentication Bypass by Capture-replay

An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources that are not otherwise accessible without proper authentication via capture-replay. Physically proximate attackers can use this informatio...

What’s in the Box?

ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...

What’s in the Box?

ARCHIVED STORY What’s in the Box? By Sam Quinn · February 25, 2019 2018 was another record-setting year in the continuing trend for consumer online shopping. With an increase in technology and efficiency, and a decrease in cost and shipping time, consumers have clearly made a statement that...