Lucene search
+L

6 matches found

CVE
CVE
added 4 days ago30 views

CVE-2026-11425

Domoticz Mobile Dashboard (versions before 2026.3) is affected by a stored XSS via Text/Alert device rendering. An authenticated attacker can update Text or Alert device values through the API to inject HTML/JavaScript, which is then rendered by ng-bind-html without proper escaping. This can exec...

4.4CVSS5.2AI score0.00156EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago9 views

CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...

2CVSS5.2AI score
SaveExploits0References5
OSV
OSV
added 2026/01/23 4:16 a.m.8 views

CVE-2026-0795

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

8.8CVSS6.4AI score0.013EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:58 a.m.27 views

CVE-2026-0784

ALGO 8180 IP Audio Alerter's Web UI is vulnerable to a command injection due to insufficient validation of user-supplied input before it is used in a system call. The flaw allows remote attackers to execute arbitrary code with the device’s privileges, as described by ZDI-CAN-28293 and reflected i...

8.8CVSS6.5AI score0.0148EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 2:57 a.m.17 views

CVE-2026-0779 ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability

ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

7.2CVSS6.5AI score0.01497EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.12 views

PT-2026-2011

Name of the Vulnerable Software and Affected Versions ALGO 8180 IP Audio Alerter affected versions not specified Description A flaw exists in the web-based user interface of the ALGO 8180 IP Audio Alerter that allows remote attackers to execute arbitrary code. Authentication is required for...

8.8CVSS7.6AI score0.0148EPSS
SaveExploits0References4
Rows per page
Query Builder