CVE-2020-27160

CVE-2020-27160 affects Western Digital My Cloud NAS devices prior to firmware 5.04.114. The vulnerability arises in AvailableApps.php, enabling remote code execution andPrivilege escalation, potentially allowing a remote attacker to run arbitrary commands with the device’s privileges. Affected pr...

CVE-2020-27160

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

CVE-2020-12830

The CVE-2020-12830 entry concerns Western Digital My Cloud devices and the vulnerability is a stack buffer overflow in unspecified components that could allow an attacker to escalate privileges via unauthorized remote code execution. Affected software is My Cloud firmware prior to version 5.04.11...

CVE-2020-12830

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...

TDM Digital Signage PC Player 4.1 Insecure File Permissions

TDM Digital Signage PC Player 4.1 Insecure File Permissions Vendor: TDM Trending Digital Marketing Product web page: https://www.tdmsignage.com https://pro.sony/enNL/products/display-software/tdm-ds1y-tdm-ds3y Affected version: 4.1.0.4 Summary: With TDM you can do a lot more than just show Digita...

CVE-2020-25765: Improper Input Validation

Addressed remote code execution vulnerability in regdevice.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140...

PT-2020-4933

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud devices versions prior to 5.04.114 Description: The issue is related to a buffer overflow in the firmware of Western Digital MyCloud NAS devices. It may allow a remote attacker to escalate privileges. Recommendations:...

CVE-2020-27158: Improper Neutralization of Special Elements used in an OS Command

Addressed remote code execution vulnerability in cgiapi.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114...

PT-2020-4932

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS devices prior to 5.04.114 Description: The issue exists due to insufficient validation of user input in the DsdkProxy.php component of Western Digital MyCloud NAS devices, allowing a remote attacker to execute...

TDM Digital Signage PC Player 4.1 - Insecure File Permissions Vulnerability

Exploit Title: TDM Digital Signage PC Player 4.1 - Insecure File Permissions Exploit Author: LiquidWorm Software Link: https://www.tdmsignage.com / https://pro.sony/enNL/products/display-software/tdm-ds1y-tdm-ds3y Version: 4.1.0.4 Vendor: TDM Trending Digital Marketing Product web page:...

Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Vulnerability

Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Date: 2020-07-24 Exploit Author: LiquidWorm Software Link: https://www.adtecdigital.com / https://www.adtecdigital.com/support/documents-downloads Version: Multiple Adtec Digital Multiple Products - Default...

PT-2020-4930

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS devices versions prior to 5.04.114 Description: The issue is related to a remote code execution vulnerability in the cgi api.php component of Western Digital My Cloud NAS devices. This vulnerability is associated...

CVE-2020-27159: Improper Neutralization of Special Elements used in an OS Command

Addressed remote code execution vulnerability in DsdkProxy.php due to insufficient sanitization and insufficient validation of user input in Western Digital My Cloud NAS devices prior to 5.04.114...

PT-2020-16190

Name of the Vulnerable Software and Affected Versions Western Digital My Cloud Devices versions prior to 5.4.1140 Description The issue is related to a remote code execution vulnerability due to insufficient validation of user input in the reg device.php file. This vulnerability can be exploited,...

CVE-2020-27160: Improper Limitation of a Pathname to a Restricted Directory

Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04.114 issue 3 of 3...

Adtec Digital Products Hardcoded Credentials / Remote Root

Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Date: 2020-07-24 Exploit Author: LiquidWorm Software Link: https://www.adtecdigital.com / https://www.adtecdigital.com/support/documents-downloads Version: Multiple Adtec Digital Multiple Products - Default...

CVE-2020-12830: Out-of-bounds Write

Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...

PT-2020-4931

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud NAS versions prior to 5.04.114 Description: The issue is related to insecure privilege management in the AvailableApps.php component of Western Digital MyCloud NAS microprogram software. It allows a remote attacker to...

TDM Digital Signage PC Player 4.1 - Insecure File Permissions

Exploit Title: TDM Digital Signage PC Player 4.1 - Insecure File Permissions Date: 2020-09-23 Exploit Author: LiquidWorm Software Link: https://www.tdmsignage.com / https://pro.sony/enNL/products/display-software/tdm-ds1y-tdm-ds3y Version: 4.1.0.4 Vendor: TDM Trending Digital Marketing Product we...

Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root

Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Date: 2020-07-24 Exploit Author: LiquidWorm Software Link: https://www.adtecdigital.com / https://www.adtecdigital.com/support/documents-downloads Version: Multiple Adtec Digital Multiple Products - Default...