6 matches found
CVE-2026-11425
Domoticz Mobile Dashboard (versions before 2026.3) is affected by a stored XSS via Text/Alert device rendering. An authenticated attacker can update Text or Alert device values through the API to inject HTML/JavaScript, which is then rendered by ng-bind-html without proper escaping. This can exec...
CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...
CVE-2026-0795
ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...
CVE-2026-0784
ALGO 8180 IP Audio Alerter's Web UI is vulnerable to a command injection due to insufficient validation of user-supplied input before it is used in a system call. The flaw allows remote attackers to execute arbitrary code with the device’s privileges, as described by ZDI-CAN-28293 and reflected i...
CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability
ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...
PT-2026-2011
Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...