PT-2022-4849 · D Link · D-Link Dir-2150

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2150 versions 4.0.1 Description: The issue is related to the xupnpd service in D-Link DIR-2150 routers, specifically the Dreambox plugin, which listens on TCP port 4044 by default. It allows network-adjacent attackers to execute...

Dreambox Opendreambox Command Execution (CVE-2017-14135)

A command execution vulnerability exists in dreambox opendreambox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Dream Multimedia Dreambox Device BouquetEditor WebPlugin Cross-Site Scripting Vulnerability

Dream Multimedia Dreambox devices is a Linux-based digital TV set-top box produced by Dream Multimedia, Germany.BouquetEditor WebPlugin is one of the plug-ins with channel naming, sorting and other functions. A cross-site scripting vulnerability exists in the BouquetEditor WebPlugin in Dream...

dreambox.co.il XSS vulnerability

Open Bug Bounty ID: OBB-360543 Description| Value ---|--- Affected Website:| dreambox.co.il Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Dreambox Plugin BouquetEditor - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Vulnerability XSS - Dreambox Shodan Dork: Dreambox 200 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: https://www.dreamboxupdate.com Version: 2.0.0 Tested on: kali linux, windows 7, 8.1, 10 CVE :...

DreamBox BouquetEditor 2.0.0 Cross Site Scripting

Exploit Title: Vulnerability XSS - Dreambox Shodan Dork: Dreambox 200 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: https://www.dreamboxupdate.com Version: 2.0.0 Tested on: kali linux, windows 7, 8.1, 10 CVE : CVE-2017-15287 Vulnerabilty: Cross-site scripting XSS in plugin...

Cross site scripting

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287

There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bouquets" field, or the file parameter to the /file URI...

CVE-2017-15287

Dream Multimedia Dreambox devices with the BouquetEditor WebPlugin (Dreambox WebControl 2.0.0) are vulnerable to reflected XSS, as shown in the Bouquet name field or the /file URI parameter. The issue is triggered via user-supplied input processed by the WebControl component, allowing arbitrary J...

Dreambox Plugin BouquetEditor - Cross-Site Scripting

Dreambox Plugin BouquetEditor - Cross-Site Scripting Exploit Title: Vulnerability XSS - Dreambox Shodan Dork: Dreambox 200 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: https://www.dreamboxupdate.com Version: 2.0.0 Tested on: kali linux, windows 7, 8.1, 10 CVE : CVE-2017-152...

Dreambox Plugin BouquetEditor - Cross-Site Scripting

Exploit Title: Vulnerability XSS - Dreambox Shodan Dork: Dreambox 200 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: https://www.dreamboxupdate.com Version: 2.0.0 Tested on: kali linux, windows 7, 8.1, 10 CVE : CVE-2017-15287 Vulnerabilty: Cross-site scripting XSS in plugin...

e2openplugin OpenWebif 1.2.4 Code Execution Vulnerability

Exploit for linux platform in category remote exploits e2openplugin-OpenWebif is an open source web interface plugin for IP TVs and media centers. It is found in several IP TV software images and hardware products including the commercial Dreambox devices. A remote code injection vulnerability wa...

e2openplugin OpenWebif 1.2.4 Code Execution

Hello all, e2openplugin-OpenWebif is an open source web interface plugin for IP TVs and media centers. It is found in several IP TV software images and hardware products including the commercial Dreambox devices. A remote code injection vulnerability was found in the "key" HTTP GET parameter of t...

OpenDreamBox Plugin Remote Code Execution Vulnerability

Dreambox is a wireless routing system similar to openwrt. A remote code execution vulnerability exists in the OpenDreamBox plugin, which allows attackers to exploit the vulnerability to illegally execute arbitrary commands...

Baby Dreambox Sleeping Sounds - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Baby Dreambox Sleeping Sounds published at the 'play' market has multiple vulnerabilities...

DreamBox DM500-S XSS Vulnerability (Jun 2015)

DreamBox DM500-S devices are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dreambox WebInfo Authentication Bypass Vulnerability

This exploit is caused by systems files , they are writable , so i check them and i was able to cat or download the /etc/shadow user file , and bypass auth by fetching the user and cracking password. This is private exploit. You can buy it at https://0day.today...

Dream Multimedia DreamBox DM500-S Cross-Site Scripting Vulnerability

Dream Multimedia DreamBox DM500-S is a Linux-based digital TV set-top box receiver from Dream Multimedia, Germany. A cross-site scripting vulnerability exists in the Dream Multimedia DreamBox DM500-S. The vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML v...