Dji_ble_vuln

CVE-2026-78306 — DJI Drone DUML Command Injection over Bluetooth POC CVE record: https://vulners.com/cve/CVE-2026-78306 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78306 説明 DJIドローンは、ドローンのWi-Fiインターフェースへの接続を確立し、Wi-Fi認証情報を交換するために使用されるBluetoothインターフェースを公開しています。...

eWeLink-QR-Code

eWeLink 모바일 애플리케이션 - 부적절한 접근 제어 취약점 CVE-2021-27941 QR 코드 페어링 모드에서 eWeLink 모바일 애플리케이션Android 4.9.2 이하, iOS 4.9.1 이하을 통해 기기의 개인 암호화 키에 대한 제약 없는 웹 접근으로 인해, 물리적으로 근접한 공격자가 기기 페어링 과정 중 Wi-Fi 스펙트럼을 모니터링하여 Wi-Fi 자격 증명 및 기타 민감 정보를 도청할 수 있습니다. 페어링 프로토콜 및 취약점 세부정보 사용자 관점에서 eWeLink 애플리케이션을 통한 IoT 기기와 사용자...

ESPTouchCatcher

eWeLink 모바일 애플리케이션 - 부적절한 접근 제어 취약점 CVE-2020-12702 eWeLink 모바일 애플리케이션Android 애플리케이션 V4.9.2 이하, iOS 애플리케이션 V4.9.1 이하의 Quick Pairing 모드에서 사용되는 취약한 암호화로 인해, 물리적으로 근접한 공격자가 페어링 과정 중 Wi-Fi 스펙트럼을 모니터링하여 Wi-Fi 인증 정보 및 기타 민감한 정보를 도청할 수 있습니다. 취약점 악용 스크립트 eWeLinkESPT는 CVE-2020-12702 취약점을 악용하는 python3...

bd-alaris-firmware-analysis

BD Alaris 8015 펌웨어 보안 분석 BD Alaris 8015 PC 장치의 펌웨어 보안 분석: 암호화되지 않은 Wi-Fi 자격 증명 저장 및 복합 취약점 CVE-2016-9355 -orange 개요 이 프로젝트는 BD Alaris 8015 Point-of-CarePC 주입 펌프의 펌웨어 보안 분석을 다루며, 특히 CVE-2016-9355 — 장치의 NAND 플래시 메모리에서 암호화되지 않은 Wi-Fi 자격 증명을 추출할 수 있는 취약점에 초점을 맞춥니다. 과정: CY 7790 - 의료기기 사이버보안 교수: Kevin ...

CVE-2026-85628 Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

EUVD-2026-80585

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-51633

Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain simplified guest Wi-Fi configuration, including guest credentials, via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-77812

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

EUVD-2026-63973

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

CVE-2026-77812

CVE-2026-77812 is a critical (CVSS 4.0: 9.4) vulnerability in DJI drones where DUML protocol messages transmitted over BLE are unencrypted . During a normal DJI Fly Wi-Fi connection or QuickTransfer mode, the drone's Wi-Fi PSK, SSID, and trusted session UUID are exposed in cleartext. A passive at...

CVE-2026-4346: Cleartext Storage of Sensitive Information

The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remains enabled and protected by weak authentication. An attacker with physical access and the ability to connect to the...

Copeland XWEB PRO 操作系统命令注入漏洞

Copeland XWEB PRO is an advanced commercial and industrial refrigeration monitoring and management system developed by the American company Copeland. Versions of Copeland XWEB PRO prior to 1.12.1 contained a vulnerability related to operating system command injection. This vulnerability stemmed...

CVE-2021-27941

Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring th...

CVE-2025-65832: Cleartext Storage of Sensitive Information in Memory

The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi credentials sent during the pairing process, JWTs used for authentication, and other sensitive details can be retrieved. ...

CVE-2025-65826: Cleartext Storage of Sensitive Information

The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were locate...

EUVD-2020-4261

Malware in sbrugna...

EUVD-2018-12994

Malware in sbrugna...

EUVD-2018-12995

Malware in sbrugna...