232 matches found
CVE-2018-11316
The CVE-2018-11316 entry concerns Sonos wireless speaker devices whose UPnP HTTP server can be abused via a DNS rebinding attack. The affected component is the Sonos UPnP web server; the underlying issue is lack of access restriction allowing unauthorized control and information exfiltration from...
CVE-2018-11316
The UPnP HTTP server on Sonos wireless speaker products allow unauthorized access via a DNS rebinding attack. This can result in remote device control and privileged device and network information to be exfiltrated by an attacker...
Sonos Speakers Information Disclosure Vulnerability (Apr 2018) - Active Check
Sonos speakers are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/a:sonos:...
Sonos Device/OS/App Detection (UPnP, TCP)
UPnP based detection of Sonos devices, Sonos OS and application. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Major Brands Sonos® and Bose® Multiple Vulnerabilities
漏洞详情请参考： https://paper.seebug.org/papers/Archive/D1%20COMMSEC%20-%20Stephen%20Hilt%20-%20Hacking%20IoT%20Speakers.pdf...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Bose & Sonos Smart Speakers can be Hacked to Play Disturbing Sounds
By Waqas Another day, another IoT flaw Sonos and Bose Smart This is a post from HackRead.com Read the original post: Bose Sonos Smart Speakers can be Hacked to Play Disturbing Sounds...
sonos.com XSS vulnerability
Vulnerable URL: https://www.sonos.com/login/logout/?returnURL="-confirmOPENBUGBOUNTY-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13988 VIP website status:| Yes Coordinated...
stitcher.com XSS vulnerability
Vulnerable URL: http://www.stitcher.com/Sonos/signin.php?ref=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 04.03.2016 Latest check for patch:| 04.03.2016 11:11 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
sonos.com XSS vulnerability
Vulnerable URL: https://www.sonos.com/login/?ReturnUrl=%22-alert%28/xssposed/%29-%22/ Details: Description| Value ---|--- Patched:| Yes, at 06.07.2016 Latest check for patch:| 06.07.2016 03:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13020 Google Pagerank...
