156 matches found
bd-alaris-firmware-analysis
BD Alaris 8015 Firmware Security Analysis Firmware Security Analysis of the BD Alaris 8015 PC Unit: Unencrypted Wi-Fi Credential Storage and Compound Vulnerabilities CVE-2016-9355 -orange Overview This project presents a firmware security analysis of the BD Alaris 8015 Point-of-Care PC infusion...
ESPTouchCatcher
eWeLink移动应用 - 不正确的访问控制漏洞（CVE-2020-12702） eWeLink移动应用（Android应用V4.9.2及更早版本，iOS应用V4.9.1及更早版本）的快速配对模式中存在弱加密，允许物理邻近的攻击者通过监听配对过程中的Wi-Fi频谱来窃听Wi-Fi凭证和其他敏感信息。 漏洞利用脚本 eWeLinkESPT是一个利用CVE-2020-12702漏洞的python3脚本。eWeLinkESPT自动解码并解密 eWeLink 移动应用在 快速配对 关联过程中传输的WiFi网络凭证。具体来说，该工具逆向分析了 eWeLink 对 ESP Touch...
eWeLink-QR-Code
eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...
CVE-2026-51633
Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain simplified guest Wi-Fi configuration, including guest credentials, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-77812
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
EUVD-2026-63973
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-77812
CVE-2026-77812 is a critical (CVSS 4.0: 9.4) vulnerability in DJI drones where DUML protocol messages transmitted over BLE are unencrypted . During a normal DJI Fly Wi-Fi connection or QuickTransfer mode, the drone's Wi-Fi PSK, SSID, and trusted session UUID are exposed in cleartext. A passive at...
CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
Copeland XWEB PRO 操作系统命令注入漏洞
Copeland XWEB PRO is an advanced commercial and industrial refrigeration monitoring and management system developed by the American company Copeland. Versions of Copeland XWEB PRO prior to 1.12.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed...
CVE-2021-27941
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring th...
EUVD-2021-14659
Malware in sbrugna...
EUVD-2011-4789
Malware in sbrugna...
EUVD-2018-12995
Malware in sbrugna...
EUVD-2018-12994
Malware in sbrugna...
EUVD-2020-4261
Malware in sbrugna...
EUVD-2018-12999
Malware in sbrugna...
EUVD-2018-12586
Malware in sbrugna...