EUVD-2012-1425

Malware in sbrugna...

CVE-2022-23637

K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting XSS vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifically crafted anchor link can, if clicked,...

CVE-2022-23637 Stored Cross-Site-Scripting (XSS) in Markdown Editor

K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting XSS vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifically crafted anchor link can, if clicked,...

CVE-2020-24217: Missing Authentication for Critical Function

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to...

CVE-2020-24214: Undefined Security Weakness

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash. The device will not be able to perform its main purpose of video encoding and streaming fo...

PT-2020-5055

Name of the Vulnerable Software and Affected Versions HiSilicon Hi3520D affected versions not specified Description The issue is related to the lack of authentication for a critical function in the HiSilicon Hi3520D chip set's firmware. This can be exploited by a remote attacker to cause a denial...

PT-2020-15662

Name of the Vulnerable Software and Affected Versions box application on HiSilicon based IPTV/H.264/H.265 video encoders affected versions not specified Description An issue in the box application allows unauthenticated attackers to view private video streams. When an administrator sets up a secr...

PT-2020-15661

Name of the Vulnerable Software and Affected Versions box application on HiSilicon based IPTV/H.264/H.265 video encoders affected versions not specified Description An issue was discovered in the box application, where attackers can use hard-coded credentials in HTTP requests to perform...

PT-2020-15660

Name of the Vulnerable Software and Affected Versions box application on HiSilicon based IPTV/H.264/H.265 video encoders affected versions not specified Description An issue in the box application allows attackers to send a crafted unauthenticated RTSP request, causing a buffer overflow and...

CVE-2020-24215: Use of Hard-coded Credentials

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration with the cleartext admin password, and...