nRF24 Playset - Software tools for Nordic Semiconductor nRF24-based Devices like Wireless Keyboards, Mice, and Presenters

The nRF24 Playset is a collection of software tools for wireless input devices like keyboards, mice, and presenters based on Nordic Semiconductor nRF24 transceivers, e.g. nRF24LE1 and nRF24LU1+. All software tools support USB dongles with the nrf-research-firmware by the Bastille Threat...

Radio Hack Box - Tool to Demonstrate Vulnerabilities in Wireless Input Devices

The SySS Radio Hack Box is a proof-of-concept software tool to demonstrate the replay and keystroke injection vulnerabilities of the wireless keyboard Cherry B.Unlimited AES. Requirements Raspberry Pi Raspberry Pi Radio Hack Box shield a LCD, some LEDs, and some buttons nRF24LU1+ USB radio dongle...

PYSEC-2017-100

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

Cross site scripting

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

PYSEC-2017-100

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

PYSEC-2017-99

Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...

Directory traversal

Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...

PYSEC-2017-99

Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...

CVE-2015-8309

Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...

CVE-2015-8310

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

CVE-2015-8309

Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."...

CVE-2015-8309

Cherry Music (the CherryMusic project) contains a directory traversal vulnerability (CVE-2015-8309) affecting versions before 0.36.0. The flaw allows remote authenticated users to read arbitrary files via the value parameter to the download endpoint, due to insufficient validation in the file pat...

CVE-2015-8310

Cherry Music (before 0.36.0) is affected by an XSS vulnerability where remote authenticated users can inject arbitrary script/HTML via the playlistname field when creating a new playlist. This is the concrete vulnerability described across multiple connected references and CVE records. The docume...

CVE-2015-8310

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

cherry music Arbitrary File Disclosure Vulnerability

cherry music is a music product. An arbitrary file disclosure vulnerability exists in cherry music version 0.35.1, which allows an attacker to download arbitrary files without authentication...

Cherry Music 0.35.1 - Arbitrary File Disclosure

Cherry Music 0.35.1 - Arbitrary File Disclosure Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage:...

Cherry Music 0.35.1 - Arbitrary File Disclosure

Exploit for php platform in category web applications Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: email protected Vendor Homepage:...

Cherry Music 0.35.1 Arbitrary File Disclosure

Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage: http://www.fomori.org/cherrymusic/index.html Software Link:...

Cherry Music 0.35.1 - Arbitrary File Disclosure

Exploit Title: Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files Date: 11-09-2016 Exploit Author: feedersec Contact: [email protected] Vendor Homepage: http://www.fomori.org/cherrymusic/index.html Software Link:...

CHERRY B.UNLIMITED AES JD-0400EU-2/01 Crypto Issues / Replay Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-031 Product: CHERRY B.UNLIMITED AES Manufacturer: Cherry GmbH Affected Versions: JD-0400EU-2/01 Tested Versions: JD-0400EU-2/01 Vulnerability Type: Cryptographic Issues CWE-310 Missing Protection against Replay Attacks Risk...