Whole Vibratissimo Smart Sex Toy XSS / Disclosure / Authentication
Posted on 03 February 2018
Multiple versions of Whole Vibratissimo Smart Sex Toy suffer from credential disclosure, exposed administrative interface, cleartext storage of passwords, unauthenticated bluetooth LE connection, and other vulnerabilities. These devices screw you in more way than one.