Full title: Heatmiser Wifi Thermostat 1.7 - Cross-Site Request Forgery (Update Admin) Vulnerability Category: web applications Platform: hardware # 0day.today @ http://0day.today/