Weak Password Vulnerability in TamronOS IPTV System

TamronOS Tenglong.com was founded in 2008, is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. TamronOS IPTV system suffers from a weak password vulnerability, which can be exploited by an attacker to log...

Command Execution Vulnerability in TamronOS IPTV/VOD Systems

Weifang Home Station Electronic Technology Co., Ltd. is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV/VOD system, which can be exploited by...

TamronOS IPTV V5 System Backend Contains Arbitrary File Download Vulnerability

TamronOS IPTV system is a live and on-demand system solution for broadband operators, hotels, schools and other high traffic scenarios. TamronOS IPTV V5 system has an arbitrary file download vulnerability in the background, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Smart IPTV System V3 of Shenzhen Zicentron Video Technology Co.

Zicentron IPTV system has telecom-grade full-service functions, supporting live TV broadcasting IGMP multicast mode and HLS unicast mode at the same time, 4K Ultra HD, time-shift playback, video-on-demand on the intranet, OTT on-demand on the extranet, desktop customization, application push,...

TamronOS IPTV System Exploits Arbitrary File Download Vulnerability

TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. TamronOS IPTV system suffers from an arbitrary file download vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in TamronOS IPTV System

TamronOS IPTV system is a set of Linux kernel-based development of broadband operators, hotels, schools, live on-demand all-in-one solution. An unauthorized access vulnerability exists in the TamronOS IPTV system. An attacker can exploit the vulnerability to obtain sensitive information...

Logic Flaw Vulnerability in IPTV Gateway Server at Chengdu Dexin Digital Technology Co.

Chengdu Dexin Digital Technology Co., Ltd. is a national high-tech enterprise integrating science, industry and trade. A logic flaw exists in the IPTV gateway server of Chengdu Dexin Digital Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in China Mobile's Third-Party IPTV Management System

China Mobile is a GSM-based mobile communications operator, and is one of the "Big Three" telecom operators along with China Unicom and China Telecom. A command execution vulnerability exists in the third-party IPTV management system of China Mobile, which can be exploited by attackers to gain...

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

Code injection

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

China Mobile An Lianbao WF-1 router 操作系统命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. An operating system command injection vulnerability exists in version 1.0.1 of the China Mobile An Lianbao WF-1 router, which stems from api/ZRIptv/setIptvInfo, that allows remote attackers to execute arbitrary commands via...

teli-iptv.com Improper Access Control vulnerability OBB-1494053

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

VulnCheck KEV: CVE-2020-24217

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. Attackers can send an unauthenticated HTTP request to upload a custom firmware component, possibly in conjunction with command injection, to...

iptv-hk.com Cross Site Scripting vulnerability OBB-1446949

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

iptv-hk.com Cross Site Scripting vulnerability OBB-1434886

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

iptv-hk.com Cross Site Scripting vulnerability OBB-1422637

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

iptvboxkorea.com Cross Site Scripting vulnerability OBB-1413380

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-24219

An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path traversal and pattern-matching programming flaws, and retrieve any file from the device's file system, including the configuration file with t...