CVE-2018-7171

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. dot dot in the contentbase parameter to rpc/setall...

PT-2018-17927

Name of the Vulnerable Software and Affected Versions Twonky Server versions 7.0.11 through 8.5 Description The issue allows remote attackers to share the contents of arbitrary directories. This is achieved by using a .. dot dot in the contentbase parameter to the "rpc/set all" endpoint...

PT-2018-17945

Name of the Vulnerable Software and Affected Versions Twonky Server versions 7.0.11 through 8.5 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to the "rpc/set all" API endpoint. Recommendations For Twonky Serv...