Authentication flaw

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

CVE-2019-6005

CVE-2019-6005 affects Smart TV Box firmware versions prior to 1300 (KDDI) where enabling LAN access after changing initial network settings allows remote attackers to access Android Debug Bridge on port 5555/TCP. The underlying issue is an access control error (CWE-284) that bypasses restrictions...

Supra Smart Cloud TV Remote File Inclusion

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/mediacontrol?action=setUri&uri= URI. Recent assessments: pbarry-r7 at November 20, 2019 11:40pm UTC reported: Have to be on...

About the security content of tvOS 12.4.1

About the security content of tvOS 12.4.1 This document describes the security content of tvOS 12.4.1 About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

KDDI Smart TV Box Access Control Error Vulnerability

KDDI Smart TV Box is a smart TV box from KDDI Japan. An Access Control Error vulnerability exists in KDDI Smart TV Boxes using firmware versions prior to 1300, which stems from the program's failure to restrict access rights and can be exploited by remote attackers to perform arbitrary operations...

JVN#17127920: Smart TV Box fails to restrict access permissions

Smart TV Box provided by KDDI CORPORATION enables access to Android Debug Bridge via port 5555/TCP of LAN side interface. When a cable television provider sets up Smart TV Box at an individual residence, direct access from outside to the LAN side interface of Smart TV Box is disabled. However if...

vevobahis25.tv Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-951562 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting vevobahis25.tv website and...

NVIDIA Shield TV has an unspecified vulnerability

The NVIDIA SHIELD TV is a gaming console device from the American company NVIDIA. A security vulnerability exists in NVIDIA Shield TV. An attacker could exploit the vulnerability to execute code, cause a denial of service, or disclose information...

NVIDIA Shield TV Experience Privilege Permission and Access Control Vulnerability

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. The NVIDIA Shield TV Experience suffers from a privilege-granting and access control vulnerability that stems from the program failing to properly authenticate the Trusted OS image. An attacker...

Unspecified Vulnerability in NVIDIA Shield TV Experience

The NVIDIA SHIELD TV entertainment console is a living room entertainment device released by NVIDIA. A security vulnerability exists in NVIDIA Shield TV Experience. An attacker could exploit the vulnerability to execute code or cause a denial of service...

OS Identification : Apple AirPlay

This script attempts to identify the operating system type and version by looking at the capabilities of the remote Apple AirPlay server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid127857; scriptversion"1.3"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS...

CVE-2019-5681

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...

CVE-2019-5681

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...

Information disclosure

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden, which may lead to code execution, denial of service, or information disclosure...

Watch a Drone Take Over a Nearby Smart TV

Smart TVs continue to look dumber by the day...

CVE-2019-5679

NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of...

CVE-2019-5682

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but does not properly restrict which applications can launch the Activity, which may lead to code execution or denial of service...

CVE-2019-5679

NVIDIA Shield TV Experience prior to v8.0, NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated, which may lead to code execution, denial of service, escalation of privileges, and information disclosure, code execution, denial of...

CVE-2019-5682

NVIDIA Shield TV Experience prior to v8.0, contains a vulnerability in the NVIDIA Games App where it improperly exports an Activity but does not properly restrict which applications can launch the Activity, which may lead to code execution or denial of service...