Nedis SmartLife 安全漏洞

Nedis SmartLife is an application from Nedis, Inc. that allows you to control and monitor home appliances and devices from your smartphone or tablet. Nedis SmartLife suffers from a security vulnerability that stems from the fact that users disconnected from the device's previous peer-to-peer...

CVE-2024-34896

An issue in Nedis SmartLife Video Doorbell WIFICDP10GY, Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed...

CVE-2024-34896

The CVE-2024-34896 entry concerns the Nedis SmartLife Video Doorbell (WIFICDP10GY) and Nedis SmartLife iOS app (v1.4.0). The connected Red Hat, NVD, and CVE records provide concrete detail: users who were previously connected via a peer-to-peer session can continue to access the live video feed e...

PT-2025-2423

Name of the Vulnerable Software and Affected Versions: Nedis SmartLife Video Doorbell WIFICDP10GY version 1.4.0 Nedis SmartLife IOS version 1.4.0 Description: The issue causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to the live video...

CVE-2024-34896

An issue in Nedis SmartLife Video Doorbell WIFICDP10GY, Nedis SmartLife IOS v1.4.0 causes users who are disconnected from a previous peer-to-peer connection with the device to still have access to live video feed...

CVE-2024-52327

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed...

CVE-2024-52327

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed...

CVE-2024-52327

CVE-2024-52327 affects ECOVACS cloud service for robot lawnmowers/vacuums; authenticated attackers can bypass PIN to access live video feed. Documented in multiple feeds with CVSS metrics (AV:N/AC:L/PR:L/UI:N/S:U for CVSS 3.1, and related CS metrics). The connected sources confirm the vulnerabili...

CVE-2024-52327 ECOVACS lawnmower and vacuum cloud service live video PIN bypass

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed...

CVE-2024-52327 ECOVACS lawnmower and vacuum cloud service live video PIN bypass

The cloud service used by ECOVACS robot lawnmowers and vacuums allows authenticated attackers to bypass the PIN entry required to access the live video feed...

CVE-2024-12504 Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisperhls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user...

CVE-2024-12504 Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisperhls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user...

CVE-2024-12504

CVE-2024-12504 concerns the WordPress plugin “Broadcast Live Video – Live Streaming” (VideoWhisper Live Streaming Integration). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the plugin’s videowhisper_hls shortcode, present in all versions up to 6.1.9. Insufficient input sanitiz...

ECOVACS robot lawnmowers和vacuums 安全漏洞

ECOVACS robot vacuums and ECOVACS robot lawnmowers are both products of the Chinese company ECOVACS.ECOVACS robot vacuums are a line of vacuum cleaners.ECOVACS robot lawnmowers are a line of lawnmowers. The ECOVACS robot lawnmowers and vacuums suffer from a security vulnerability that stems from ...

PT-2025-2925 · Ecovacs · Ecovacs

Name of the Vulnerable Software and Affected Versions: ECOVACS affected versions not specified Description: The issue allows authenticated attackers to bypass the PIN entry required to access the live video feed. This affects the cloud service used by ECOVACS robot lawnmowers and vacuums...

WordPress plugin Broadcast Live Video 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress VideoWhisper Live Streaming Integration plugin <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by yudha in WordPress Plugin Broadcast Live Video versions = 6.1.9...

Unauthorized Access Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

KingH5Stream is a live video streaming solution based on HTML5 technology. KingH5Stream by Beijing Asian Control Technology Development Co. Ltd. has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2024-51781 WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stefan Backor Firework Shoppable Live Video firework-videos allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through = 6.3...

CVE-2024-51781 WordPress Firework Shoppable Live Video plugin <= 6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Loop Now Technologies, Inc. Firework Shoppable Live Video allows Reflected XSS.This issue affects Firework Shoppable Live Video: from n/a through 6.3...