CVE-2021-41502

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting XSS vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute...

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

CVE-2024-41502

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting XSS via the form field "Observaces" observances in the "Pessoas" persons section when creating or editing either a legal or a natural person...

CVE-2024-41502

The real estate platform Jetimob Plataforma Imobiliaria (version 20240627-0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the "Observaces" (observances) form field within the "Pessoas" (persons) section. An attacker can inject arbitrary web scripts or HTML when creatin...

CVE-2021-41502

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting XSS vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute...

CVE-2021-41502

Subrion CMS v4.2.1 contains a stored XSS vulnerability. The flaw allows injecting malicious JavaScript by altering the name of an uploaded image, closing an HTML tag, or adding an onerror attribute, enabling script execution. Connected documents confirm the same issue across multiple feeds (inclu...

CVE-2021-41872

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

CVE-2021-41872

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

CVE-2021-41872

The CVE-2021-41872 entry concerns Skyworth Digital Technology’s Penguin Aurora Box 41502, a networked set‑top box, with a denial of service vulnerability. The available Connected documents confirm the affected product is the Penguin Aurora Box family (specifically version 41502) and identify the ...

Skyworth Digital Penguin Aurora Box 安全漏洞

The Skyworth Digital Penguin Aurora Box is a high-end network HD set-top box from Skyworth Digital, a Chinese company, produced by Tencent Video in collaboration with Skyworth Digital. A security vulnerability exists in the Skyworth Digital Penguin Aurora Box, which originates from a denial of...

CVE-2021-41872: Undefined Security Weakness

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

CVE-2021-41873

CVE-2021-41873 concerns Penguin Aurora TV Box 41502 (a high-end network HD set-top box by Tencent Video/Skyworth Digital). Connected sources corroborate an unauthorized access vulnerability that lets an attacker use a specific link to remotely control the TV. The NVD entry lists a very high CVSS ...

CVE-2021-41873: Undefined Security Weakness

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

PT-2021-23444

Name of the Vulnerable Software and Affected Versions Penguin Aurora TV Box 41502 Description An unauthorized access issue exists in the Penguin Aurora Box, allowing an attacker to gain unauthorized access to a specific link and remotely control the TV. Recommendations For Penguin Aurora TV Box...

Penguin Aurora TV Box 41502 安全漏洞

Skyworth Digital Penguin Aurora Tv Box is a high-end network HD set-top box from China's Skyworth Digital, produced by Tencent Video in conjunction with Skyworth Digital. A security vulnerability exists in Penguin Aurora TV Box 41502, which can be exploited by an attacker to gain unauthorized...