EUVD-2019-2771

Malware in sbrugna...

CVE-2020-14114

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

Xiaomi SmartHome APP Information Disclosure Vulnerability

Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...

Xiaomi SmartHome APP 信息泄露漏洞

Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...

CVE-2021-26638

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

Improper access control

A broken access control vulnerability in SmartHome app Android versions up to 3.0.42190515, ios versions up to 2.0.22 allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway HG100 via http://target/smarthome/devicecontrol witho...

CVE-2019-11063

The CVE-2019-11063 issue is a broken access control in the SmartHome app/Web API server affecting ASUS SmartHome (Android up to 3.0.42_190515; iOS up to 2.0.22) with gateway HG100. The vulnerability permits an attacker on the same LAN to enumerate user accounts and control connected IoT devices v...