joey-zhou

Products

ProductCVEsExploitedLatest
xiaozhi-esp32-server-java3–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-111623 Medium 5.6 Xiaozhi-esp32-server-java through 6.1.0 Authentication Bypass via OTA Endpoint Token Issuance 0.5%
  • CVE-2025-15135 Medium 6.3 joey-zhou xiaozhi-esp32-server-java Cookie AuthenticationInterceptor.java tryAuthenticateWithCookies improper authentication 0.3%
  • CVE-2025-3382 Medium 6.3 joey-zhou xiaozhi-esp32-server-java update sql injection 0.3%