PT-2022-11999

Name of the Vulnerable Software and Affected Versions Hiby Music Hiby OS R3 Pro versions 1.5 through 1.6 Description The issue allows an attacker to navigate through the device's file system over HTTP due to insufficient input data sanitization in the HTTP Server when displaying data from the SD...

CVE-2021-44124: Improper Limitation of a Pathname to a Restricted Directory

Hiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does not have enough input data sanitization when shown data from SD Card, an attacker can navigate through the device's File System over HTTP...