95 matches found
CVE-2023-33768
CVE-2023-33768 Description La vérification incorrecte de la signature du firmware lors du processus de mise à jour du firmware de la prise intelligente Belkin Wemo WSP080 v1.2 permet aux attaquants de provoquer un déni de service DoS via un fichier firmware malveillant. Additional Information Lor...
CVE-2023-33768
CVE-2023-33768 Описание Неверная проверка подписи прошивки во время процесса обновления прошивки устройства Belkin Wemo Smart Plug WSP080 v1.2 позволяет злоумышленникам вызвать отказ в обслуживании DoS с помощью специально созданного файла прошивки. Дополнительная информация При обновлении прошив...
CVE-2025-66974
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
CVE-2025-66974
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
PT-2026-92138
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
EUVD-2025-210914
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
CVE-2025-66974: Improper Input Validation
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
CVE-2025-66974
The Prolink 13A Smart Plug (Model Version: DS-3202M-UKv3 Wi-Fi) and the mEzee application (Version 2.6.7 ) are vulnerable to an issue that allows attackers to cause a Denial of Service (DoS) or force a connection to an attacker-controlled device. This vulnerability is triggered by supplying a cra...
CVE-2025-66974
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
EUVD-2019-6680
Malware in sbrugna...
EUVD-2023-40140
Malicious code in bioql PyPI...
EUVD-2023-37920
Malicious code in bioql PyPI...
EUVD-2023-40139
Malicious code in bioql PyPI...
CVE-2025-8627 Unauthenticated Protocol Commands on TP-Link KP303
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
CVE-2023-36161
An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...
CVE-2019-15745
The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP port 27431. An attacker on the local network can use the same key to encrypt and send commands to discover all smart...
CVE-2024-46040
IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
CVE-2024-46040
The IoT Haat Smart Plug IH-IN-16A-S (version v5.16.1 ) is vulnerable to Insufficient Session Expiration . The root cause is a lack of validation for authentication tokens during the Access Point Pairing mode. An attacker can exploit this by replaying captured Wi-Fi packets to forcefully turn off ...