EUVD-2020-28095

Malware in sbrugna...

EUVD-2020-28094

Malware in sbrugna...

CVE-2020-6954

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

CVE-2020-6955

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...

Unspecified Vulnerability in Cayin SMP-PRO4

The Cayin SMP-PRO4 is a digital signage player. An unspecified vulnerability exists in the Cayin SMP-PRO4. An attacker can exploit the vulnerability to view stored passwords...

Cayin SMP-PRO4 Cross-Site Scripting Vulnerability

The Cayin SMP-PRO4 is a digital signage player. A cross-site scripting vulnerability exists in Cayin SMP-PRO4. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

CVE-2020-6954

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

Default credentials

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

Cross site scripting

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...

CVE-2020-6954

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

CVE-2020-6954

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...

CVE-2020-6955

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...

PT-2020-19304

Name of the Vulnerable Software and Affected Versions Cayin SMP-PRO4 affected versions not specified Description An issue was discovered that allows reflected XSS on Cayin SMP-PRO4 devices through the "image preview.html" endpoint with the filename parameter. Recommendations At the moment, there ...

PT-2020-19303

Name of the Vulnerable Software and Affected Versions Cayin SMP-PRO4 devices affected versions not specified Description A security issue allows a user to discover a saved password by viewing the URL after a Connection String Test. The password is visible in the webpass parameter of a "media...

CVE-2020-6955: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...

CVE-2020-6954: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a mediafolder.cgi?applymode=pingserver URI...