Ksenia Security Lares 4.0 Home Automation 安全漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/advisories/GHSA-g2pw-5fjr-fhhf
• https://cert.kenet.or.ke/cve-2025-15113-ksenia-security-lares-40-home-automation-16-remote-code-execution-mpfs-upload
• https://cxsecurity.com/issue/WLB-2025040006
• https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-pin-exposure-vulnerability
• https://www.zeroscience.mk/old2/en/vulnerabilities/ZSL-2025-5927.php
• https://nvd.nist.gov/vuln/detail/CVE-2025-15111
• https://nvd.nist.gov/vuln/detail/CVE-2025-15114
• https://nvd.nist.gov/vuln/detail/CVE-2025-15112
• https://www.vulncheck.com/advisories/ksenia-security-lares-home-automation-url-redirection-vulnerability
• https://www.zeroscience.mk/old2/en/vulnerabilities/ZSL-2025-5929.php

Related Vulnerabilities

• PoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
• PoCCVE-2026-5032: W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure
• Tattile Camera /api/v1/security/login 默认口令漏洞（CVE-2026-26341）
• PoCCVE-2023-49438: Python Flask-Security-Too <=5.3.2 - Open Redirect
• Rundeck /j_security_check 默认口令漏洞
• Pentaho /pentaho/j_spring_security_check 默认口令漏洞
• PoCCVE-2025-40536: SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
• PoCwp-all-in-one-wp-security-and-firewall-fpd: All In One WP Security & Firewall - Full Path Disclosure
• PoCwp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure
• Frappe /api/method/frappe.automation.doctype.auto_repeat.auto_repeat.generate_message_preview SQL 注入漏洞（CVE-2025-68929）