Remote-controlled sex toys may be vulnerable to attack by malicious third parties, according to new research.