43 matches found
PT-2023-9142 · Wyze +1 · Wyze Cam V3 +1
Name of the Vulnerable Software and Affected Versions: Roku Indoor Camera SE version 3.0.2.4679 Wyze Cam v3 version 4.36.11.5859 Description: A stack-based buffer overflow issue exists in the message parsing functionality. This can be triggered by a specially crafted message, leading to a...
MAL-2022-567 Malicious code in @roku-web-core/ajax (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b91c6eb13ceb3e23c595456e0139e5abbd90ec53ce9f38463755879bb0c078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-27152
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...
CVE-2022-27152
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...
CVE-2022-27152
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...
Design/Logic Flaw
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...
RokuOS 安全漏洞
RokuOS is an internet set-top box from the American company Roku. It provides a variety of streaming content and outputs it to a TV. A security vulnerability exists in RokuOS v9.4.0, there is no information about the vulnerability at the moment, please keep checking CNNVD or the manufacturer's...
CVE-2022-27152
CVE-2022-27152 affects RokuOS on devices using a Realtek WiFi chip with RokuOS 9.4.0 build 4200 or earlier. The vulnerability enables arbitrary file modification. The available connected sources indicate the affected platform and version range; no explicit root cause details are provided in the d...
CVE-2022-27152
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification...
Gambling, Streaming Traffic Up During Men's College Basketball Tourney
Baylor wasn't the only big winner in the 2021 men's college basketball tournament. Gambling industry-related web traffic delivered by Akamai jumped 31% over the category average for all of Q4 2020 on March 31st. That was the day after the field of four finalists - Baylor, Houston, Gonzaga and UCL...
CVE-2021-21266 XXE vulnerability in OpenHAB
openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity XXE attack allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from th...
On Roku and Amazon Fire TV, Channels Are Watching You
New research shows that over 2,000 streaming apps track information about your devices—even when you tell them not to...
Streaming Video Fans Open to TV Hijacking
A suite of critical remote code-execution vulnerabilities in a streaming TV platform could expose entire databases of subscribers’ personal info and financial details – and could open the door to attackers hijacking the service, streaming any content they wish to customer screens. According to...
Xxe
The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...
CVE-2018-11314
The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...
CVE-2018-11314
CVE-2018-11314 affects Roku and Roku TV External Control API. The vulnerability enables unauthorized remote control via DNS rebinding, potentially exposing privileged device and network information. Documented impact includes remote device control and data exfiltration on affected Roku platforms;...
CVE-2018-11314
The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...
PT-2018-10474 · Roku · Roku
Name of the Vulnerable Software and Affected Versions: Roku and Roku TV products affected versions not specified Description: The issue allows unauthorized access to the device via a DNS Rebind attack, potentially resulting in remote device control and the exfiltration of privileged device and...
