EUVD-2020-16953

Malware in sbrugna...

PT-2020-15664

Name of the Vulnerable Software and Affected Versions URayTech IPTV/H.264/H.265 video encoders versions through 1.97 Description An issue allows attackers to send crafted unauthenticated HTTP requests to exploit path traversal and pattern-matching programming flaws. This enables retrieval of any...

CVE-2020-24219: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path traversal and pattern-matching programming flaws, and retrieve any file from the device's file system, including the configuration file with t...

PT-2020-15663

Name of the Vulnerable Software and Affected Versions URayTech IPTV/H.264/H.265 video encoders versions prior to 1.98 Description An issue was discovered that allows attackers to log in as root via a hard-coded password in the executable file. Recommendations For versions prior to 1.98, update to...

CVE-2020-24218: Use of Hard-coded Credentials

An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can log in as root via the password that is hard-coded in the executable file...