https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:10:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71231 <p><strong>Affected:</strong> thebradleysanders IOTSmartHome</p> <p>IOTSmartHome&#39;s gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID=&#39;&lt;decoded lastLogin cookie&gt;&#39; after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string.</p> <p><strong>Affected:</strong> thebradleysanders IOTSmartHome</p> <p>IOTSmartHome&#39;s gui/login.php checkCookie function builds an authentication query as SELECT * FROM users WHERE ID=&#39;&lt;decoded lastLogin cookie&gt;&#39; after base64-decoding the client-supplied lastLogin cookie via safe_decode, which performs URL-safe base64 decoding with no sanitization of the decoded value before it is concatenated into the SQL string.</p> https://cve.radiocsirt.org/vuln/cve-2026-71231