CVE-2018-16594

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

CVE-2018-16593

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

CVE-2018-16593

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

Directory traversal

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

Design/Logic Flaw

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

Buffer overflow

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...

CVE-2018-16593

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection...

CVE-2018-16593

CVE-2018-16593 affects Sony Bravia TV Photo Sharing Plus (up to version 8.587). The flaw is a shell metacharacter injection in the Photo Sharing Plus component, enabling arbitrary commands execution with root privileges if a device is on the same network. Exploitation is described as local/adjace...

CVE-2018-16594

CVE-2018-16594 describes a Directory Traversal vulnerability in Sony Bravia TV Photo Sharing Plus on the TV firmware up to version 8.587. The issue arises from how Photo Sharing Plus handles uploaded file names (e.g., crafted ../../), allowing access to restricted filesystem paths outside the int...

CVE-2018-16594

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

CVE-2018-16595

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow...

CVE-2018-16595

CVE-2018-16595 affects the Sony Bravia TV Photo Sharing Plus component (versions 8.587 and earlier). Affected functionality: memory write/read operations due to insufficient input size checking, causing a buffer/heap overflow (root cause: missing data boundary validation). Impact: potential disru...

Supra Smart Cloud TV Remote File Inclusion

An authentication bypass vulnerability exists in Supra Smart Cloud TV. Successful exploitation of this vulnerability would allow a local attacker to broadcast any video without any authentication or to broadcast a fake emergency message...

Your Google Calendar Isn't Safe, an Eye-Controlled TV, and More News

Catch up on the most important news from today in two minutes or less...

Amazon Alexa Secretly Records Children, Lawsuits Allege

A federal lawsuit is alleging that Amazon is recording children who use its Alexa devices, without their consent or knowledge. Alexa is the built-in voice assistant shipped with devices like Amazon Echo, Amazon Dot, Fire TV and some third-party gadgets. “Alexa routinely records and voiceprints...

Supra Smart Cloud TV Remote File Containment Vulnerability

Zoran Supra Smart Cloud TV is a smart TV from Zoran USA. A security vulnerability exists in the 'openLiveURL' function in Zoran Supra Smart Cloud TV. A local attacker can exploit this vulnerability to broadcast fake videos without authentication via /remote/mediacontrol?action=setUri&uri= URI...

Smart TV and then exposed vulnerabilities--Supra Smart Cloud TV vulnerability can cause the device to be hijacking-vulnerability warning-the black bar safety net

An attacker can take advantage of a smart TV vulnerability, the attack connected to the home router to get remote access. Supra smart TV in a not patched the vulnerability so that the same Wi-Fi network, the attacker can hijack the TV device, play their own content, such as a fake emergency...

CVE-2019-12477

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/mediacontrol?action=setUri&uri= URI...

Remote file inclusion

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/mediacontrol?action=setUri&uri= URI...

CVE-2019-12477

The CVE-2019-12477 entry describes a remote file inclusion in Supra Smart Cloud TV. The openLiveURL function is vulnerable to unauthenticated remote file inclusion via /remote/media_control?action=setUri&uri=, allowing a local attacker on the same network to broadcast fake video without authentic...