Magic AirMusic - Unauth Control API Detection (CVE-2019-13474)

Detects CVE-2019-13474 by requesting /playinfo, /hotkeylist or /stop and looking for XML result/menu responses without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Magic AirMusic / TELESTAR internet radio missing access control CVE-2019-13474.""" from kittysploit import from...

Magic AirMusic Detection (HTTP)

The script sends a HTTP request to the remote host and attempts to detect the presence of a Magic AirMusic device. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Magic AirMusic Insufficient Access Control Vulnerability

Various products of multiple vendors using the Magic AirMusic web interface for the control of the device are prone to an insufficient access control vulnerability. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...