PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Samsung Tizen OS | Version Through 9.0

bishopfox.com | blog | #rce | #vulnerability-research | #iot | #command-injection | #iot-security | #samsung | #tizen | #smart-tv
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox discloses an arbitrary command injection in Samsung Tizen OS through 9.0: with developer mode on and requests from the configured host IP, attackers can run OS-level commands on smart TVs.
Published
Collected

Related coverage

blog · blog.viettelcybersecurity.com
The first step to PWN2OWN - A sad one
A researcher's first find: LAN-side command injection in the NETGEAR RAX30 UPnP service via a malicious SOAPACTION header embedded into a logger command; patched just before Pwn2Own Toronto 2022.
blog · blog.viettelcybersecurity.com
Thành phố thông minh có thể bị hack như thế nào
Researchers assessing Akuvox smart intercoms used in smart cities found command injection, hardcoded Android credentials, default-cert web config and unauthenticated RTSP camera flaws, now patched.
blog · blog.viettelcybersecurity.com
Kiểm tra vài camera Trung Quốc và cái kết
A researcher tests three cheap Chinese cameras, finding default telnet credentials, command injection in CGI functions and unauthenticated RCE via firmware update parsing.
blog · blog.viettelcybersecurity.com
Lỗ hổng trên dòng ONT IGate GW040
Research on ONT IGate GW040 routers: the crontab and weakly secured TR-069 features allow easy botnet recruitment, and firmware analysis uncovered command injection in /bin/httpd via IPSec requests.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
Back