CVE-2017-3078

CVE-2017-3078 Description On CVE-2017-3078 Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system. Description 2 : Adobe...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

unknownpwn.github.io

Tecnovision LED Video Wall Vulnerabilities and Exploits. From SQLi to full root access. Introduction: Tecnovision is a manufacturer of LED Video Walls used in arenas For example, Twickenham Stadium, concert halls, shopping malls, as roadsigns and much much more. DlxSpot Player 4 is the software...

CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Inyección SQL no autenticada El plugin no sanitiza ni escapa un parámetro de una ruta REST antes de usarlo en una sentencia SQL, lo que permite a usuarios no autenticados realizar ataques de inyección SQL script de configuración: 1. git clone...

yamaha-smaf-player

Reproductor Yamaha SMAF C++ por Akustikrausch Andreas Wendorf Un pequeño reproductor sin dependencias para tonos Yamaha SMAF .mmf en C++. Le das uno de esos archivos que hacían que tu Samsung, Sharp o Panasonic hiciera deedle-deedle-dee en 2004, y te devuelve audio estéreo limpio. Sin teléfono, s...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 This script creates a swf payload for CVE-2018-15982, which is based off of the PoC from https://github.com/smgorelik/Windows-RCE-exploits. The vulnerability was discovered by Chenming Xu and Ed Miles of Gigamon ATR. The vulnerability is a use-after-free flaw enabling...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 desbordamiento de búfer en ty.c del reproductor multimedia Diff...

CVE-2015-0311

Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Prueba de concepto de eliminación arbitraria de archivos ★ Descripción CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar = 5.7.0.1 – Falta de autorización para usuarios autenticados Suscriptor+ para eliminación arbitraria de archivos...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

JoomSport <= 5.7.7 - SQL Injection

The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - Unauthenticated Server-Side Request Forgery Description The Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This...

CVE-2017-3000

CVE-2017-3000 Un exploit completo de CVE-2017-3000 en Flash Player Constant Blinding PRNG Inserta WANG y wang en el heap de código generado dinámicamente al final...

CVE-2018-15982

Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...

CVE-2018-4878

Autor y Créditos Autor: Vincent Yiu @vysecurity Créditos: @evi1cg: Ayudándome a probar y mantener mi motivación @smgoreli: PoC original de Calc.exe @kbandla: Él lo sabe, y yo lo sé. ; Descargo de responsabilidad Desarrollado para fomentar más desarrollo de scripts Aggressor. ¡Úselo solo en prueba...

cve-2015-0313

CVE-2015-0313 来自 Angler Exploit Kit 的 Adobe Flash 漏洞源代码 cve-2015-0313 参考资料： http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/ http://malware.dontneedcoffee.com/2015/02/cve-2015-0313-flash-up-to-1600296-and.ht...