gta4.tv Cross Site Scripting vulnerability OBB-4037708

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nazaret.tv Cross Site Scripting vulnerability OBB-4037670

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Apple Security Update: tvOS 18.3.1

Apple recommends to install security update tvOS 18.3.1 on devices Apple TV 4K 3rd generation...

The vulnerability of the Image Handler component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows a hacker to trigger a service failure.

The vulnerability of the Image Handler component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS, related to writing beyond the memory buffer, allows attackers to damage memory.

The vulnerabilities of the operating systems visionOS, iOS, iPadOS, MacOS, watchOS, and tvOS are related to writing beyond the buffer boundaries of memory. Exploiting these vulnerabilities can allow attackers to corrupt memory...

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS allows a attacker to execute arbitrary code.

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, tvOS, and visionOS is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the CoreMedia component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows attackers to gain increased privileges.

The vulnerability of the CoreMedia component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

The vulnerability of the nv17_tv_get_hd_modes() function in the Linux kernel’s DRM driver allows a hacker to trigger a service failure.

The vulnerability of the nv17tvgethdmodes function in the Linux kernel’s DRM driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to trigger a service failure...

CVE-2024-54522

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory...

CVE-2024-54478

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to an unexpected process...

PT-2025-5284 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.3 tvOS versions prior to 18.3 watchOS versions prior to 11.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: A permissions issue was addressed with additional restrictions. A malicious...

About the security content of tvOS 18.3

About the security content of tvOS 18.3 This document describes the security content of tvOS 18.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2025-5324 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.7.3 iOS versions prior to 18.3 iPadOS versions prior to 17.7.4 and prior to 18.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 visionOS versions prior to 2.3 Description: The issue is related to incorre...

Apple Security Update: tvOS 18.2.1

Apple recommends to install security update tvOS 18.2.1 on devices Apple TV HD and Apple TV 4K all models...

CVE-2024-12818

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

CVE-2024-12818

CVE-2024-12818 refers to a Stored XSS in the WP Smart TV WordPress plugin via the tv-video-player shortcode, affecting all versions up to and including 2.1.8. The vulnerability stems from insufficient input sanitization and output escaping of user-supplied shortcode attributes, allowing an authen...

CVE-2024-12818 WP Smart TV <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

PT-2025-1957 · WordPress · Wp Smart Tv

Name of the Vulnerable Software and Affected Versions: WP Smart TV plugin for WordPress versions up to and including 2.1.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode due to insufficient input sanitization and output escaping on...

WordPress plugin WP Smart TV 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...