CVE-2021-25328

Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service DoS or possible code execution on the device...

CVE-2021-25327

Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery CSRF vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting XSS...

Buffer overflow

Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service DoS or possible code execution on the device...

Cross site request forgery (csrf)

Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery CSRF vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting XSS...

CVE-2021-25328

Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service DoS or possible code execution on the device...

CVE-2021-25327

The CVE-2021-25327 entry concerns Skyworth RN510 (Firmware V.3.1.0.4). A CSRF vulnerability exists in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp due to missing CSRF protection, with the description noting potential XSRF tied to XSS-prone pages. Connected sources corroborate the affe...

CVE-2021-25327

Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery CSRF vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting XSS...

Skyworth Digital Technology Limited Penguin Aurora Box has Denial of Service Vulnerability

Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. A denial of service vulnerability exists in the Skyworth Digital Technology Limited Penguin Aurora Box, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Home Gateway DT741-csf

Shenzhen Skyworth Digital Technology Co., Ltd. business scope includes: development, research, operation of digital video broadcasting system series products, research and development, sales of multimedia information system. A denial of service vulnerability exists in the home gateway DT741-csf,...

Denial of Service Vulnerability in DT541-csf Devices

Shenzhen Skyworth Digital Technology Co., Ltd. is a high-tech enterprise focusing on providing digital TV network audio-visual products and operation and services for global users. A denial of service vulnerability exists in the DT541-csf device, which can be exploited by attackers to cause a...

Denial of Service Vulnerability in DT741 Fusion Smart Terminal

Shenzhen Skyworth Digital Technology Co., Ltd. is a high-tech enterprise focusing on providing digital TV network audio-visual products and operation and services for global users. A denial of service vulnerability exists in the DT741 Converged Smart Terminal, which can be exploited by attackers ...

Tackling Video Piracy Head-On

We are clearly in a "new" golden age of TV. Audiences around the world have never had so many viewing options available. This has led to a creative surge in new groundbreaking storytelling and entertainment as both broadcasters and digital giants try to maintain the loyalty of their viewers. This...

Safer Internet Day

February 11, 2020, is Safer Internet Day, a worldwide event aimed at promoting the safe and positive use of digital technology for all users, especially children and teens. This year's theme—Together for a better internet—encourages everyone to play their part in creating a safer, more secure...

Skyworth GPON HomeGateways and Optical Network Terminals - Stack Overflow Exploit

''' ======================================================== Unauthenticated Stack Overflow in Multiple Gpon Devices ======================================================== . contents:: Table Of Content Overview ======== Title:- StackOverflow in Multiple Skyworth GPON HomeGateways and Optical...

IoT botnet of heaters & ovens can cause massive widespread power outages

By Uzair Amir Botnet of Smart Power-Consuming Appliances May Cause Widespread Power Outages. Digital technology has revolutionized the way we use appliances and perform day-to-day chores. Nowadays, our air conditioners are smart enough to be turned off or on remotely, washing machines send us a...

SQL Injection Vulnerability in Vanguard Digitizing System

Vanguard Digital Technology Inc. provides web animation, graphic visual design, online advertising and marketing, and multimedia CD-ROM production services. A SQL injection vulnerability exists in the Vanguard Digital Web Building System. An attacker can exploit the vulnerability to obtain...

Safer Internet Day

February 6, 2018, is Safer Internet Day SID, a worldwide event aimed at promoting the safe and positive use of digital technology for all users, especially children and teens. This year's SID theme—Create, Connect and Share Respect: A better Internet starts with you—encourages everyone to play...

Stored Cross-site Scripting Vulnerability in Template/View.aspx Page of Shanghai Excellence Ruixin Digital Technology Co.

Excellence Course Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A stored cross-site scripting vulnerability exists in the comments of the Template/View.aspx page of the Excellence...

Arbitrary File Upload Vulnerability in Jinan Guozi Digital Technology Asset Management Information System

The functions of the asset management system cover all aspects of state-owned asset supervision and management business activities. The functions of the asset management system for grass-roots units include the management of applications and declarations, procurement and acceptance, daily changes...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysList.aspx?sysbh=000001 The...