Sayli Ambure

4 exploits Active since Apr 2020
CVE-2020-25498 NOMISEC MEDIUM WORKING POC
Beetel 777VR1 Firmware - Stored Cross-Site Scripting via NTP Server Name and URL Filter Keyword
Cross Site Scripting (XSS) vulnerability in Beetel router 777VR1 can be exploited via the NTP server name in System Time and "Keyword" in URL Filter.
3 stars
CVSS 4.8
CVE-2020-35262 NOMISEC MEDIUM WRITEUP
Digisol DG-HR3400 Firmware - Stored Cross-Site Scripting via NTP Server Name and URL Filter Keyword
Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.
1 stars
CVSS 6.1
CVE-2020-11539 NOMISEC HIGH WORKING POC
Tata Sonata Smart SF Rush 1.12 - Unauthenticated Cleartext Transmission of Sensitive Information
An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device.
1 stars
CVSS 8.1
CVE-2020-11539 WRITEUP HIGH WORKING POC
Tata Sonata Smart SF Rush 1.12 - Unauthenticated Cleartext Transmission of Sensitive Information
An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device.
CVSS 8.1