13 matches found
EUVD-2020-30845
BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...
CVE-2020-36884: Server-Side Request Forgery (SSRF)
BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...
BrightSign Digital Signage - Multiple Vulnerablities
Exploit for hardware platform in category web applications Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: email protected Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device Firmwa...
BrightSign Digital Signage XSS / Traversal / File Upload
Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: [email protected] Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below suffers from multiple...
Design/Logic Flaw
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
CVE-2017-17738
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
CVE-2017-17738
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
CVE-2017-17737: Improper Neutralization of Input During Web Page Generation
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has XSS via the REF parameter to /networkdiagnostics.html or /storageinfo.html...
CVE-2017-17739: Improper Limitation of a Pathname to a Restricted Directory
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files...
PT-2017-14978
Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 versions 6.2.63 and below Description The issue allows renaming and modifying files via the "/tools.html" API endpoint. Recommendations For versions 6.2.63 and below, consider restricting access to the...
PT-2017-14977
Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 device versions 6.2.63 and below Description The issue concerns a problem where an attacker can execute malicious scripts. The estimated number of potentially affected devices worldwide is not specified. Detail...
PT-2017-14979
Name of the Vulnerable Software and Affected Versions BrightSign Digital Signage 4k242 versions 6.2.63 and below Description The issue allows directory traversal via the "/storage.html" API endpoint, specifically through the rp parameter. This enables an attacker to read or write to files...