54 matches found
CVE-2025-3925 BrightSign Players Execution with Unnecessary Privileges
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained...
CVE-2025-3925
CVE-2025-3925 affects BrightSign OS: BrightSign OS series 4 before 8.5.53.1 and series 5 before 9.0.166. The issue is described as an execution with unnecessary privileges, enabling privilege escalation on the device once code execution is obtained. Multiple connected sources confirm the affected...
BrightSign Players 安全漏洞
BrightSign Players is a series of professional-grade digital signage player hardware from BrightSign, powered by BrightSign OS, which supports 4K Ultra HD content playback and interactive control. A security vulnerability exists in BrightSign Players versions prior to v8.5.53.1 and prior to...
CVE-2025-3925: Execution with Unnecessary Privileges
BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privilege escalation on the device once code execution has been obtained...
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems ICS advisories on May 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-126-01 Optigo Networks ONS NC600 ICSA-25-126-02 Milesight UG65-868M-EA ICSA-25-126-03...
BrightSign Players (Update A)
RISK EVALUATION Successful exploitation of this vulnerability could allow for privilege escalation on the device, easily guessed passwords, or for arbitrary code to be executed on the underlying operating system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...
PT-2025-19997 · Brightsign · Brightsign Os Series 4 +1
Name of the Vulnerable Software and Affected Versions: BrightSign OS series 4 versions prior to 8.5.53.1 BrightSign OS series 5 versions prior to 9.0.166 Description: The issue allows for privilege escalation on the device once code execution has been obtained, due to execution with unnecessary...
BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery (Unauthenticated)
Exploit Title: BrightSign Digital Signage Diagnostic Web Server 8.2.26 - Server-Side Request Forgery Unauthenticated Date: 2020-09-30 Exploit Author: LiquidWorm Vendor Homepage: https://www.brightsign.biz Version: = 8.2.26 BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SS...
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Server-Side Request Forgery
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF Vendor: BrightSign, LLC Product web page: https://www.brightsign.biz Affected version: Model: XT, XD, HD, LS Firmware / OS version: =8.2.26 Summary: BrightSign designs media players and provides free software and cloud...
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF
Summary BrightSign designs media players and provides free software and cloud networking solutions for the commercial digital signage market worldwide, serving all vertical segments of the marketplace. Description Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the...
BrightSign Digital Signage (4k242) Directory Traversal Vulnerability
The BrightSign Digital Signage 4k242 is a multimedia playback device from BrightSign USA. A directory traversal vulnerability exists in the BrightSign Digital Signage 4k242 using firmware version 6.2.63 and earlier. An attacker can exploit the vulnerability by sending the 'rp' parameter to the...
BrightSign Digital Signage (4k242) Cross-Site Scripting Vulnerability
BrightSign Digital Signage 4k242 is a set of digital signage multimedia playback devices from BrightSign USA. A cross-site scripting vulnerability exists in BrightSign Digital Signage 4k242 using firmware version 6.2.63 and earlier, which stems from the program failing to validate user input. A...
BrightSign Digital Signage (4k242) File Upload Vulnerability
The BrightSign Digital Signage 4k242 is a multimedia playback device from BrightSign USA. A security vulnerability exists in BrightSign Digital Signage 4k242 using firmware version 6.2.63 and earlier. The vulnerability can be exploited to rename and modify files via the /tools.html web page...
BrightSign Digital Signage XSS / Traversal / File Upload
Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: [email protected] Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below suffers from multiple...
BrightSign Digital Signage - Multiple Vulnerablities
BrightSign Digital Signage - Multiple Vulnerablities Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: [email protected] Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device...
BrightSign Digital Signage - Multiple Vulnerablities
Exploit for hardware platform in category web applications Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: email protected Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device Firmwa...
BrightSign Digital Signage - Multiple Vulnerablities
Exploit Title: BrightSign Digital Signage Multiple Vulnerabilities Date: 12/15/17 Exploit Author: [email protected] Vectors: XSS, Directory Traversal, File Modification, Information Leakage The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below suffers from multiple...
Design/Logic Flaw
The BrightSign Digital Signage 4k242 device Firmware 6.2.63 and below allows renaming and modifying files via /tools.html...
