ECOVACS HOME mobile app plugins for specific robots do not properly validate TLS certificates. An unauthenticated attacker can rea

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to

Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a s

In multiple versions of Sophos Endpoint products for MacOS, a local attacker could execute arbitrary code with administrator privi

Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes

Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.