-CVE-2024-45352

🚨 CVE-2024-45352 – 小米智能家居远程代码执行（RCE） 📌 摘要 在小米智能家居（Xiaomi Smarthome）应用中发现了一个严重漏洞（CVE-2024-45352），由于内部 API 解析器的输入处理不当，允许未经身份验证的远程代码执行（RCE）。本地网络中的攻击者可利用此漏洞在受影响系统上执行任意命令。 🛡️ CVE 编号 CVE： CVE-2024-45352 CVSS（估计值）： 8.8（高危） 攻击向量： 网络 攻击复杂度： 低 所需权限： 无 用户交互： 无 🧪 概念验证（PoC） 以下 PoC 通过向小米智能家居本地 API 发送恶意构造的请求来演示...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit IDs de CVE CVE-2019-11061 : Control de acceso roto en HG100 Productos afectados : ASUS SmartHome Gateway HG100 Versión de firmware Productos afectados : Aplicación ASUS SmartHome Android APP versión 3.0.45190701 Descripción Si el atacante está en la misma red interna que el...

MAL-2025-48969 Malicious code in @i22-td-smarthome/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231c1be0a2029cd552d25b2d4b2c9cbfa6879f11a564134ff8a89fb5f27b41e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @i22-td-smarthome/component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 231c1be0a2029cd552d25b2d4b2c9cbfa6879f11a564134ff8a89fb5f27b41e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @i22-td-smarthome/component-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

EUVD-2025-36792

Malicious code in @i22-td-smarthome/component-library npm...

EUVD-2020-6273

Malware in sbrugna...

EUVD-2019-2771

Malware in sbrugna...

EUVD-2020-30352

Malware in sbrugna...

EUVD-2025-8268

Malicious code in bioql PyPI...

Exploit for CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE...

CVE-2020-9550

Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely...

CVE-2020-14114

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

CVE-2024-45352

An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45352

An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45352 Xiaomi smarthome application Webview has code execution vulnerability

An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45352 Xiaomi smarthome application Webview has code execution vulnerability

An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45352

CVE-2024-45352 affects the Xiaomi Smarthome application. A code execution vulnerability exists due to improper input validation in the internal API parser. The connected exploit document provides a PoC showing unauthenticated RCE via a crafted request to the local API (curl to /api/parse), implyi...

PT-2025-13026 · Xiaomi · Xiaomi Smarthome Application

Name of the Vulnerable Software and Affected Versions: Xiaomi smarthome application affected versions not specified Description: A code execution issue exists due to improper input validation, allowing attackers to execute malicious code. Recommendations: At the moment, there is no information...

Xiaomi SmartHome APP 安全漏洞

Xiaomi SmartHome APP is an application for managing Xiaomi SmartHome products from China's Xiaomi Xiaomi. A security vulnerability exists in Xiaomi SmartHome APP, which stems from improper input validation and could lead to code execution...