16293 matches found
CVE-2026-75960: Insufficiently Protected Credentials
Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...
PT-2026-82102
Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially...
CVE-2026-75334
The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution . The vulnerability exists because the sqlResource.sql parameter, submitted via the ReportController.save() interface, is stored in the t_report_sql_resource table and subsequently embedded directly int...
CVE-2026-75334
The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...
PT-2026-82264
Name of the Vulnerable Software and Affected Versions smart-web2 version 1.3.1 Description The report module in the backend allows arbitrary SQL execution. This occurs because the sqlResource.sql parameter, processed through the ReportController.save interface and stored in the t report sql...
CVE-2026-75334
The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...
Rently Smart Home
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...
BGPay: An Incentive-Compatible Mechanism for BGP Hijack Filtering
BGP hijacking remains a persistent threat as existing defenses, including RPKI/ROV suffer from a fundamental incentive misalignment: the networks best positioned to filter malicious announcements bear operational costs but receive no direct benefit, while the victim prefix owner captures all the...
Malicious code in ultra-smart-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-smart-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15807 Malicious code in ultra-smart-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15808 Malicious code in ultra-smart-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-smart-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15806 Malicious code in ultra-smart-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15793 Malicious code in tiny-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-smart-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15792 Malicious code in tiny-smart-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...