Skip to content
OpenAdvisories

Vendor

thebradleysanders

1 known vulnerabilities.

Products

IOTSmartHome 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-71231

    IOTSmartHome - Unauthenticated SQL Injection via lastLogin Cookie

    IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID='<decoded lastLogin cookie>' after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding w…

    thebradleysanders IOTSmartHome