CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport

CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF via the UPnP MediaRenderer service...

CVE-2025-60500

CVE-2025-60500 — Carga de archivos insegura / fallo lógico en QDocs Smart School Smart School 7.1 Fecha de publicación: 2025-10-17 Autor / Descubridor: Lebas Vivien Estado: Reservado CVE: CVE-2025-60500 reservado Resumen Una carga de archivos insegura / fallo lógico en QDocs Smart School — School...

CVE-2026-10243-AUTH

Smart Parking System 1.0 - Acceso no autenticado a funciones críticas de administración Información de la vulnerabilidad...

CVE-2025-70600---Urve-Smart-Office---Stored-XSS-in-iOS-App

URVE Smart Office iOS — XSS Almacenado a través del Campo HTML de un Tile PoC Este repositorio documenta una prueba de concepto PoC para una vulnerabilidad de cross-site scripting XSS almacenado que afecta a la aplicación móvil iOS de URVE Smart Office. Debido a una validación de entrada...

domestic-system

El Sistema Doméstico Una hermosa billetera Ethereum y navegador de contratos inteligentes basado en terminal, construido para soberanía, seguridad y estilo. root@kitploit: ━━━━━━━━━━━━━━━━━━━━ domestic system ━━━━━━━━━━━━━━━━━━━━ Descripción general The Domestic System es una interfaz de usuario ...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment Esta vulnerabilidad afecta la disponibilidad del dispositivo y el funcionamiento confiable del Ventilador Inteligente Atomberg Erica Versión de Firmware 1.0.36. El problema surge debido a la falta de mecanismos de protección contra tramas de...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

Este repositorio no tiene un README...

pwnfb50

pwnfb50 Transfiere la propiedad de cualquier cerradura inteligente FB50 a ti mismo CVE-2019-13143 Vídeo del PoC Uso root@kitploit: $ python3 pwnfb50.py id mac Donde id es tu ID de usuario, y el mac es la dirección MAC de tu cerradura...

CVE-2026-69785

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

EUVD-2026-73615

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69785

CVE-2026-69785 is an untrusted search path vulnerability in Windows Smart Card that allows an authorized attacker to elevate privileges locally. The flaw resides in how Windows Smart Card resolves file paths, permitting a local attacker with low privileges (no user interaction required) to achiev...

CVE-2026-33389

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

CVE-2026-33391

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...

Windows Smart Card Elevation of Privilege Vulnerability

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

EUVD-2026-72788

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart...

CVE-2026-33391

Nozomi Networks Guardian/CMC contains an access control vulnerability in the Smart Polling configuration functionality, caused by insufficient validation of user privileges (incorrect authorization). An authenticated user with limited privileges can remotely bypass the web management interface's ...

CVE-2026-33389 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

CVE-2026-33389

An improper certificate/host key validation vulnerability exists in the Smart Polling functionality of Nozomi Networks Guardian/CMC (before 26.3.0 ) and Nozomi Networks Arc (before v2.7.0 ). Encrypted connections to polled devices were established without validating the remote host's identity, an...

EUVD-2026-72787

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...

Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0

Summary An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. Impact An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modif...