PT-2023-30517 · Scrypted · Scrypted

Name of the Vulnerable Software and Affected Versions: Scrypted versions 0.55.0 and prior Description: A reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the owner and pkg parameters, allowing an attacker to run arbitrary JavaScript code. This issue may lead to...

CVE-2020-10250: Improper Neutralization of Special Elements used in an OS Command

BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3...