CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

Cross site request forgery (csrf)

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

The CVE-2018-13989 issue affects Grundig Smart Inter@ctive TV 3.0. It enables Cross-Site Request Forgery via a POST to TCP port 8085 that carries a predictable ID (example: /sendrcpackage?keyid=-2544&keysymbol=-4081), allowing an attacker to shut off the device. Multiple sources (NVD entry and CN...

live.fujigoko.tv XSS vulnerability

Open Bug Bounty ID: OBB-642784 Description| Value ---|--- Affected Website:| live.fujigoko.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Western Digital WD TV Detection

Detection of Western Digital WD TV. The script sends a connection request to the server and attempts to detect Western Digital WD TV and to extract its firmware version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

About the security content of tvOS 11.4.1

About the security content of tvOS 11.4.1 This document describes the security content of tvOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Western Digital WD TV Live Hub RCE Vulnerability

The web server on Western Digital TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2018-11314

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...

CVE-2018-11314

CVE-2018-11314 affects Roku and Roku TV External Control API. The vulnerability enables unauthorized remote control via DNS rebinding, potentially exposing privileged device and network information. Documented impact includes remote device control and data exfiltration on affected Roku platforms;...

CVE-2018-11314

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...

sbt.com.br XSS vulnerability

Open Bug Bounty ID: OBB-638430 Description| Value ---|--- Affected Website:| sbt.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: NVIDIA SHIELD TV Software Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV vulnerabilities may lead to code execution, denial of service, escalation of privileges, or information disclosure Go to NVIDIA Product Security. Vulnerability Details This section summarizes the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow the CVS...

tv-voerde.de XSS vulnerability

Open Bug Bounty ID: OBB-637635 Description| Value ---|--- Affected Website:| tv-voerde.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

play.syndicaster.tv XSS vulnerability

Open Bug Bounty ID: OBB-634492 Description| Value ---|--- Affected Website:| play.syndicaster.tv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Western Digital TV Media Player and TV Live Hub Uncertified RCE Vulnerability

Western Digital TV Media Player and TV Live Hub are both multimedia player products from Western Digital. A security vulnerability exists in Western Digital TV Media Player version 1.03.07 and TV Live Hub version 3.12.13. A remote attacker can exploit this vulnerability by sending a specially...

Amazon Fire TV & Fire TV Stick hit by crypto mining Android malware

By Waqas A traditional malware aims at stealing user data or keep This is a post from HackRead.com Read the original post: Amazon Fire TV & Fire TV Stick hit by crypto mining Android malware...

CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...

CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...