EUVD-2018-5921

Malware in sbrugna...

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Exploit Title: Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Date: 2018-07-§3 Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link:...

Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery

Exploit Title: Grundig Smart Inter@ctive 3.0 - Cross-Site Request Forgery Date: 2018-07-§3 Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link: https://play.google.com/store/apps/details?id=arcelik Version: Before Smart Inter@ctive 3.0 Tested on:...

Grundig Smart Inter@ctive TV Cross-Site Request Forgery Vulnerability

Grundig Smart Inter@ctive TV is a television device. A cross-site request forgery vulnerability exists in Grundig Smart Inter@ctive TV version 3.0. A remote attacker can exploit this vulnerability by sending a POST request with an ID value to TCP port 8085 to access the TV desktop and perform...

Grundig Smart [email protected] 3.0 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Grundig Smart email protected 3.0 - Cross-Site Request Forgery Exploit Author: Ahmethan-Gultekin - t4rkd3vilz Vendor Homepage: https://www.grundig.com/ Software Link: https://play.google.com/store/apps/details?id=arcelik...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

Cross site request forgery (csrf)

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

The CVE-2018-13989 issue affects Grundig Smart Inter@ctive TV 3.0. It enables Cross-Site Request Forgery via a POST to TCP port 8085 that carries a predictable ID (example: /sendrcpackage?keyid=-2544&keysymbol=-4081), allowing an attacker to shut off the device. Multiple sources (NVD entry and CN...

Grundig Smart Inter@ctive 3.0 Insecure Direct Object Reference

Exploit Title: Grundig Smart Remote App CSRF Google Dork: Local Vulnerability Date: 06.07.2018 Exploit Author: Ahmethan GALTEKAdegN @inject0r16 Vendor Homepage: https://www.grundig.com/ Software Link: https://play.google.com/store/apps/details?id=arcelik. android.grundig.remote Version: Grundig...