Apple TV < 18.6 Multiple Vulnerabilities (124153)

According to its banner, the version of Apple TV on the remote device is prior to 18.6. It is therefore affected by multiple vulnerabilities as described in the 124153 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid249207; scriptversion"1.3";...

Google Android TV has an unspecified vulnerability

Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...

CVE-2025-8757 TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

CVE-2025-8757: Least Privilege Violation

A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /server/boa.conf of the component Embedded Boa Web Server. The manipulation leads to least privilege violation. Local access is required to approa...

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2025-51040: Exposure of Sensitive Information to an Unauthorized Actor

Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2...

SUSE CVE-2025-24189

The issue was addressed with improved checks. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to memory corruption...

Google Android TV 安全漏洞

Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...

CVE-2025-43224

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 2.6, tvOS 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple macOS is a specialized operating system developed for Mac computers. A security vulnerability exists in several Apple products that originates from memory mishandling and may resu...

Apple多款产品 安全漏洞

Apple Safari and others are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. apple iOS is a set of operating systems developed for mobile devices. apple macOS is a set of specialized operating systems develope...

About the security content of tvOS 18.6

About the security content of tvOS 18.6 This document describes the security content of tvOS 18.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Malicious code in tv-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware addb927c8910ec93507080bad17c52b12df866249c823ceb79970bda06bc74d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in tv-app

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2025-53313

Cross-Site Request Forgery CSRF vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through = 2.1.0...

CVE-2025-53313

Cross-Site Request Forgery CSRF vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through = 2.1.0...

CVE-2025-53313 WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through = 2.1.0...

CVE-2025-53313

CVE-2025-53313 describes a CSRF vulnerability in the Twitch TV Embed Suite WordPress plugin that enables stored XSS. Affected software: Twitch TV Embed Suite (plugin) versions n/a through 2.1.0. Root cause: Cross-Site Request Forgery leading to stored XSS. Public details in the connected sources ...

CVE-2025-53313 WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in plumwd Twitch TV Embed Suite allows Stored XSS. This issue affects Twitch TV Embed Suite: from n/a through 2.1.0...