Baby Dreambox Sleeping Sounds - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Baby Dreambox Sleeping Sounds published at the 'play' market has multiple vulnerabilities...

DreamBox DM500-S XSS Vulnerability (Jun 2015)

DreamBox DM500-S devices are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dreambox WebInfo Authentication Bypass Vulnerability

This exploit is caused by systems files , they are writable , so i check them and i was able to cat or download the /etc/shadow user file , and bypass auth by fetching the user and cracking password. This is private exploit. You can buy it at https://0day.today...

Dream Multimedia DreamBox DM500-S Cross-Site Scripting Vulnerability

Dream Multimedia DreamBox DM500-S is a Linux-based digital TV set-top box receiver from Dream Multimedia, Germany. A cross-site scripting vulnerability exists in the Dream Multimedia DreamBox DM500-S. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML v...

CVE-2015-4714

Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...

Cross site scripting

Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...

CVE-2015-4714

Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...

CVE-2015-4714

DreamBox DM500-S is vulnerable to a cross-site scripting (XSS) flaw (CVE-2015-4714) in its web interface. The vulnerability arises from unsanitized input in the mode parameter of the /body endpoint, enabling remote attackers to inject arbitrary script/HTML. OpenVAS NASL notes the vulnerability as...

PT-2015-6676

Name of the Vulnerable Software and Affected Versions DreamBox DM500-S affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the mode parameter to the "/body" API endpoint. Recommendations For DreamBox...

CVE-2015-4714: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the DreamBox DM500-S allows remote attackers to inject arbitrary web script or HTML via the mode parameter to /body...

DreamBox DM500s Cross Site Scripting

DreamBox DM500s Reflected XSS Vendor: Dream Multimedia GmbH Product web page: http://www.dream-multimedia-tv.de Summary: The Dreambox DM500s is a Linux-powered DVB satellite, terrestrial and cable digital television receivers set-top box. Tested on: Linux Kernel 2.6.9, The Gemini Project, Enigma...

Dreambox Web Interface URI Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30919/info Dreambox is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the affected device, denying service to legitimate users. Given the nature of this issue, attackers may...

DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit

No description provided by source. !/usr/bin/perl DreamBox DM800 = 1.5rc1 Remote File Disclosure Exploit Author: Todor Donev Email: todor.donev@@gmail.com Type: Hardware Vuln Type: Remote Product summary: DreamBox DM800 is Powerful receiver for digital TV and Radio programs based on Linux. Produc...

FW: mutant200s DreamBox Arbitrary File Download Vulnerability

Exploit Title: mutant200s DreamBox Arbitrary File Download Vulnerability Google Dork: Date: 30/01 /2012 Author: k3vin mitnick Software Link: Version: Tested on: CVE : DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream Multimedia GmbH Product web page:...

mutant200s DreamBox Arbitrary File Download Vulnerability

Exploit for multiple platform in category web applications Exploit Title: mutant200s DreamBox Arbitrary File Download Vulnerability Google Dork: Date: 30/01 /2012 Author: k3vin mitnick Software Link: Version: Tested on: CVE : DreamBox DM500+ Arbitrary File Download Vulnerability Vendor: Dream...

Dreambox DM800 Path Traversal

...

CVE-2011-4716

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter...

Directory traversal

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter...

CVE-2011-4716

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read arbitrary files via the file parameter...

CVE-2011-4716

CVE-2011-4716 describes a directory traversal vulnerability in DreamBox DM800 (versions up to 1.6rc3, 1.5rc1 and earlier) that allows remote attackers to read arbitrary files via the file parameter. The affected component is the file handling logic within the DreamBox DM800 firmware. The underlyi...