CVE-2021-41872

The CVE-2021-41872 entry concerns Skyworth Digital Technology’s Penguin Aurora Box 41502, a networked set‑top box, with a denial of service vulnerability. The available Connected documents confirm the affected product is the Penguin Aurora Box family (specifically version 41502) and identify the ...

CVE-2021-41872

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

PT-2021-23443

Name of the Vulnerable Software and Affected Versions Skyworth Digital Technology Penguin Aurora Box version 41502 Description The issue is a denial of service vulnerability that can be exploited by attackers to cause a denial of service. Recommendations For Skyworth Digital Technology Penguin...

CVE-2021-41872: Undefined Security Weakness

Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...

Skyworth Digital Penguin Aurora Box security vulnerability

The Skyworth Digital Penguin Aurora Box is a high-end network HD set-top box from Skyworth Digital, a Chinese company, produced by Tencent Video in collaboration with Skyworth Digital. A security vulnerability exists in the Skyworth Digital Penguin Aurora Box, which originates from a denial of...

CVE-2021-41873

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

CVE-2021-41873

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

Design/Logic Flaw

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

CVE-2021-41873

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

CVE-2021-41873

CVE-2021-41873 concerns Penguin Aurora TV Box 41502 (a high-end network HD set-top box by Tencent Video/Skyworth Digital). Connected sources corroborate an unauthorized access vulnerability that lets an attacker use a specific link to remotely control the TV. The NVD entry lists a very high CVSS ...

About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks. PoC With a role as low as Contributor, put the following payloads in one of the Social...

WordPress About Author Box plugin <= 1.0.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Francesco Carlucci in WordPress About Author Box plugin versions = 1.0.1. Solution Update the WordPress About Author Box plugin to the latest available version at least 1.0.2...

PT-2021-23444

Name of the Vulnerable Software and Affected Versions Penguin Aurora TV Box 41502 Description An unauthorized access issue exists in the Penguin Aurora Box, allowing an attacker to gain unauthorized access to a specific link and remotely control the TV. Recommendations For Penguin Aurora TV Box...

CVE-2021-41873: Undefined Security Weakness

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV...

PT-2021-27865

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

PT-2021-23644

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 2.9.1 Description A Cross Site Scripting XSS issue exists in the node input box in Custom Templates. This allows for potential exploitation. Recommendations For versions prior to 2.9.1, update to version 2.9.1 or...

CVE-2021-42650: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

Portainer cross-site scripting vulnerabilities

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the node input box in custom templates prior to Portainer version 2.9.1...

PT-2021-27860

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a global buffer overflow read. The crash involves the functions fr base16 decode nstd, fr value box from str, and...