← All credits

Sammy Azdoufal

24 vulnerability records and advisories credit this contributor.

CVE-2026-105040

EnergizeLab Eilik User-ID Mass Assignment Account Takeover

CVE-2026-105039

EnergizeLab Station Middleware Admin APIs Missing Role Checks

CVE-2026-105038

EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching

CVE-2026-105037

EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read

CVE-2026-105036

EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks

CVE-2026-105035

EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key

CVE-2026-105034

EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers

CVE-2026-105033

EnergizeLab AI Station Default Root Credentials with SSH Enabled

CVE-2026-105032

EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write

Aqara Home Android SDK hardcoded keys