CAREL pCOWeb Devices Detection (HTTP)

HTTP based detection of CAREL Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

A vulnerability in the GUI temperature control software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability in the GUI temperature control software is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the syntax analysis of the GD1 file...

The vulnerability of the pcwin.dll library in temperature control software, related to a data type mismatch error, allows a hacker to execute code remotely.

The vulnerability of the pcwin.dll library in the GUI temperature control software is related to a data type mismatch error. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the syntactic analysis of the GD1 file...

The vulnerability of the 3core.dll software for temperature control, specifically GUIcon, arises from a type mismatch error in the used data types. This allows an attacker to execute arbitrary code.

The vulnerability of the 3core.dll software for temperature control, related to the GUIcon component, is due to a type mismatch error in the used data types. Exploiting this vulnerability allows an attacker to execute code during the syntactic analysis of the GD1 file...

Ghost hardware. Device No.2, the Boo Buddy

The “Boo Buddy” is sold as a “trigger object” with a wide range of internal functionality such as EMF, motion and temperature detection. It’s a “trigger object”, in the sense that it is designed to evoke the spirits of children, who might be drawn in by the presence of a toy. Many people have...

Belkin Wemo-Enabled Crock-Pot Remote Control

This module acts as a simple remote control for Belkin Wemo-enabled Crock-Pots by implementing a subset of the functionality provided by the Wemo App. No vulnerabilities are exploited by this Metasploit module in any way. This module requires Metasploit: https://metasploit.com/download Current...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

Information disclosure

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

Rest Devices Mimo Baby Man-in-the-Middle Attack Vulnerability

Rest Devices Mimo Baby is a baby sleep tracker device from Rest Devices UK. A security vulnerability exists in Rest Devices Mimo Baby version 2, which stems from the program failing to properly perform authentication or encryption for Bluetooth Low Energy BLE communication between the Turtle and...

CVE-2018-10825

Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy BLE communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the position and temperature of a baby via a replay or spoofing attack...

Friday Squid Blogging: Market Squid in Alaskan Waters

Rising sea temperatures is causing market squid to move north into Alaskan waters. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Logic design flaws in Kenda Renko 485 devices

RS485 temperature and humidity logger/temperature and humidity controller The transmitter is widely used in communication rooms, warehouses and buildings, as well as self-control and other places where temperature and humidity monitoring is required, the input power supply within the sensor, the...

Rimet Wifi Smart Temperature Control Android APP is vulnerable to reset arbitrary account passwords

Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Android APP is vulnerable to reset any account password. Attackers can reset any password and enter the device management interface to remotely operate various temperature control, gas...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components, including the temperature control driver and the Android operating system’s video driver, are related to access control deficiencies. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary local malware code within the kernel...

Cpu Temperature - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cpu Temperature published at the 'play' market has multiple vulnerabilities...

Trusted Path Code Execution Vulnerability in Lenovo PC Manager

Lenovo PC Manager is a system cleanup software, the software can help users easily and quickly clean up the computer system junk files, and can provide users with real-time monitoring of the computer's cpu temperature, real-time intelligent control of the computer temperature, so as to protect th...