232 matches found
CVE-2026-2629
A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes os command injection. It is possible ...
CVE-2026-2629
CVE-2026-2629 affects the jishi node-sonos-http-api, specifically the TTS Provider’s mac-os.js, in the Promise function. The issue is an argument-phrase manipulation that enables os command injection. A remote attacker could initiate the attack. Public exploit details exist, and the project uses ...
CVE-2026-2629 jishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection
A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes os command injection. It is possible ...
CVE-2026-2629
A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes os command injection. It is possible ...
CVE-2026-2629 jishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection
A weakness has been identified in jishi node-sonos-http-api up to 3776f0ee2261c924c7b7204de121a38100a08ca7. Affected is the function Promise of the file lib/tts-providers/mac-os.js of the component TTS Provider. This manipulation of the argument phrase causes os command injection. It is possible ...
PT-2026-20346
Name of the Vulnerable Software and Affected Versions jishi node-sonos-http-api versions prior to 3776f0ee2261c924c7b7204de121a38100a08ca7 Description A flaw exists in jishi node-sonos-http-api that could allow for remote execution of operating system commands. The issue is related to the...
SONOS HTTP API 安全漏洞
SONOS HTTP API is a system control interface developed by Jimmy Shimizu as an individual developer. There is a security vulnerability in the SONOS HTTP API, which stems from improper handling of the phrase parameter in the TTS Provider component. This vulnerability may lead to OS command injectio...
CVE-2023-50809
In certain Sonos products before S1 Release 11.12 and S2 release 15.9, the mt7615.ko wireless driver does not properly validate an information element during negotiation of a WPA2 four-way handshake. This lack of validation leads to a stack buffer overflow. This can result in remote code executio...
CVE-2023-50810
In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...
EUVD-2018-3355
Malware in sbrugna...
EUVD-2020-30111
Malware in sbrugna...
EUVD-2025-12191
Malicious code in bioql PyPI...
EUVD-2025-12378
Malicious code in bioql PyPI...
EUVD-2023-55542
Malicious code in bioql PyPI...
EUVD-2024-46494
Malicious code in bioql PyPI...
EUVD-2025-12192
Malicious code in bioql PyPI...
EUVD-2022-28961
Malicious code in bioql PyPI...
EUVD-2023-31128
Malicious code in bioql PyPI...