TI-2025-12179 CVE-2025-13316 · GHSA-6wjv-8p85-pcxm
Hard-coded encryption keys in Twonky Server
Priority MEDIUM 41
Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys.
Vulnerabilities
6 records
TI-2025-12178 CVE-2025-13315 · GHSA-x96r-v3vc-578h
Unauthenticated log access in Twonky Server
Priority HIGH 72
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw.
TI-2018-06669 CVE-2018-9182 · GHSA-7rhj-8m83-26xf
Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.
Priority LOW 30
Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section.
TI-2018-06668 CVE-2018-9177 · GHSA-5r9h-jr43-76fj
Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.
Priority LOW 28
Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen.
TI-2018-05220 CVE-2018-7203 · GHSA-34j4-g3h6-ww5q
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows…
Priority LOW 32
Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary web script or HTML via the friendlyname parameter to rpc/set_all.
TI-2018-05193 CVE-2018-7171 · GHSA-w6p6-8rg5-jg22
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote…
Priority MEDIUM 55
Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a ..