Tô tiểu thư
Security Research
About
Vulnerabilities
RSS
Say Friend and Enter: Digitally lockpicking an advanced smart lock (Part 2: discovered vulnerabilities)
March 06, 2024
Say Friend and Enter: Digitally lockpicking an advanced smart lock (Part 1: architecture and protocol)
February 19, 2024
CVE-2023-7017: Kontrol Lux Lock Firmware Update Auth Bypass
December 21, 2023
CVE-2023-7007: Gateway G2 Impersonation
December 21, 2023
CVE-2023-6960: TTLock virtual keys reuse
December 21, 2023
TTLock virtual keys can be reused even after invalidation
December 20, 2023
The firmware of the Kontrol Lux lock can be updated w/o AuthZ/AuthC
December 20, 2023
A Gateway G2 can be impersonated using its MAC address
December 20, 2023