PT-2025-17326 · Worldcast Systems · Worldcast Systems Ecreso Fm/Dab/Tv Transmitter

Name of the Vulnerable Software and Affected Versions: WorldCast Systems ECRESO FM/DAB/TV Transmitter version 1.10.1 Description: The issue allows authenticated attackers to escalate privileges via a crafted JSON payload. Recommendations: For WorldCast Systems ECRESO FM/DAB/TV Transmitter version...

CVE-2025-28237

The WorldCast Systems ECRESO FM/DAB/TV Transmitter version 1.10.1 contains a security vulnerability allowing authenticated attackers to escalate privileges . The root cause is the improper handling of a crafted JSON payload , which facilitates unauthorized access to elevated permissions. To mitig...

CVE-2025-28237: Improper Privilege Management

An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON payload...

Kuku FM 安全漏洞

Kuku FM is an audiobook audio software from Kuku FM Inc. A security vulnerability exists in Kuku FM v1.12.7, which stems from the android:allowBackup=true setting and could lead to an attacker accessing sensitive plaintext data...

CVE-2025-22641

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prem Tiwari FM Notification Bar fm-notification-bar allows Stored XSS.This issue affects FM Notification Bar: from n/a through = 1.0.4...

CVE-2024-33052

Memory corruption when user provides data for FM HCI command control operations...

CVE-2025-22641

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prem Tiwari FM Notification Bar fm-notification-bar allows Stored XSS.This issue affects FM Notification Bar: from n/a through = 1.0.4...

CVE-2025-22641 WordPress FM Notification Bar plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prem Tiwari FM Notification Bar allows Stored XSS. This issue affects FM Notification Bar: from n/a through 1.0.2...

CVE-2025-22641

CVE-2025-22641 is a Stored XSS in the WordPress FM Notification Bar plugin (versions 1.0.2 and earlier) caused by improper input neutralization during web page generation. Public details confirm affected software and the vulnerability type; Patchstack indicates a fix in later releases (plugin

CVE-2025-22641: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Prem Tiwari FM Notification Bar fm-notification-bar allows Stored XSS.This issue affects FM Notification Bar: from n/a through = 1.0.4...

CVE-2018-9398

In fmsetstat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9398: Out-of-bounds Write

In fmsetstat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9398

In fmsetstat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9398

In fmsetstat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2024-10665 · Mediatek · Mediatek Fm Radio Driver

Name of the Vulnerable Software and Affected Versions: Mediatek FM radio driver affected versions not specified Description: The issue is related to improper input validation in the fm set stat function of the Mediatek FM radio driver, which could lead to a local escalation of privilege. This...

CVE-2024-9692

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service DoS vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations...

CVE-2024-9692 Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service DoS vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations...

VIMESA VHF/FM Transmitter Blue Plus

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : VIMESA Equipment : VHF/FM Transmitter Blue Plus Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could...

CVE-2024-9692: Improper Access Control

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service DoS vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations...

CVE-2024-41988

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image upload without authentication. This file system serves as the basis for the HTTP2 web server module but is also used by the SNMP module and is available to other applications th...