CVE-2018-7203

Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...

CVE-2018-7203

Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...

CVE-2018-7203

CVE-2018-7203 affects Twonky Server 7.0.11–8.5, with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/set_all. The vulnerability is described in the NVD entry for CVE-2018-7203 and is corroborated by OpenVA...

CVE-2018-7171

The CVE-2018-7171 entry relates to Twonky Server (versions 7.0.11–8.5). The vulnerability is a directory traversal in the contentbase parameter of rpc/set_all, enabling remote attackers to access arbitrary directories. Multiple OpenVAS entries corroborate Twonky Server as affected and link the is...

PT-2018-17945

Name of the Vulnerable Software and Affected Versions Twonky Server versions 7.0.11 through 8.5 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to the "rpc/set all" API endpoint. Recommendations For Twonky Serv...

PT-2018-17927

Name of the Vulnerable Software and Affected Versions Twonky Server versions 7.0.11 through 8.5 Description The issue allows remote attackers to share the contents of arbitrary directories. This is achieved by using a .. dot dot in the contentbase parameter to the "rpc/set all" endpoint...

CVE-2018-7171: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. dot dot in the contentbase parameter to rpc/setall...

CVE-2018-7203: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/setall...

TwonkyMedia Server 7.0.11-8.5 - Directory Traversal Exploit

Exploit for multiple platform in category web applications ''' --------------------------------------------------------------------- 1. About --------------------------------------------------------------------- Exploit Title: TwonkyMedia Server 7.0.11-8.5 Directory Traversal Date: 2018-03-27...

thesimonsenteam.elliman.com XSS vulnerability

Open Bug Bounty ID: OBB-586256 Description| Value ---|--- Affected Website:| thesimonsenteam.elliman.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

USN-3595-2: Samba vulnerability

USN-3595-1 fix a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to cras...

Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerabilities (USN-3595-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3595-1 advisory. Bjrn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker cou...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

DEBIAN-CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

Design/Logic Flaw

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

CVE-2018-1050

CVE-2018-1050 is a NULL pointer dereference in Samba’s RPC external printer service that can crash the print spooler, affecting Samba releases from 4.0.0 onward. The issue arises from missing input validation in spoolss RPC calls, leading to a denial-of-service condition. Public advisories and pr...

CVE-2018-1050

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...