CVE-2021-21399

Ampache (web-based audio/video streaming app and file manager) is affected by CVE-2021-21399. Versions prior to 4.4.1 allow unauthenticated access to the Ampache backend via the Subsonic API if an attacker uses a username not associated with the site to bypass authentication. This is described in...

CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

Design/Logic Flaw

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

CVE-2019-18230

The CVE-2019-18230 entry affects Honeywell equIP and Performance series IP cameras. Root cause: Missing Authentication for Critical Function (CWE-306) leading to unauthenticated access to audio streams over HTTP. Affected products/versions are Honeywell equIP and Performance series cameras; CVSS ...

CVE-2019-18230

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

PT-2019-15292

Name of the Vulnerable Software and Affected Versions Honeywell equIP and Performance series IP cameras affected versions not specified Description A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP. Recommendations At the moment, there is...

CVE-2019-18230: Missing Authentication for Critical Function

Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP...

WordPress s3bubble-amazon-s3-audio-streaming plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. s3bubble-amazon-s3-audio-streaming is an audio player plugin for streaming Amazon S3 used in it. A path traversal vulnerability exists...

CVE-2015-9463

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

CVE-2015-9463

The CVE-2015-9463 entry concerns the WordPress plugin s3bubble-amazon-s3-audio-streaming (version 2.0). A directory traversal flaw exists in the plugin via the adverts/assets/plugins/ultimate/content/downloader.php path parameter, enabling access to restricted filesystem locations. Multiple conne...

PT-2019-7422

Name of the Vulnerable Software and Affected Versions s3bubble-amazon-s3-audio-streaming plugin version 2.0 Description The issue concerns directory traversal via the path parameter in the /adverts/assets/plugins/ultimate/content/downloader.php API endpoint. This allows for potential unauthorized...

CVE-2015-9463: Improper Limitation of a Pathname to a Restricted Directory

The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter...

Amcrest Technologies IP Camera Unauthenticated Remote Audio Streaming Vulnerability

The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link:...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming Exploit

Exploit for hardware platform in category web applications Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@email protected" Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected...

Amcrest Cameras 2.520.AC00.18.R - Unauthenticated Audio Streaming

Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...

Amcrest Cameras 2.520.AC00.18.R Unauthenticated Audio Streaming

Exploit Title: Unauthenticated Audio Streaming from Amcrest Camera Shodan Dork: html:"@WebVersion@" Date: 08/29/2019 Exploit Author: Jacob Baines Vendor Homepage: https://amcrest.com/ Software Link: https://amcrest.com/firmwaredownloads Affected Version: V2.520.AC00.18.R Fixed Version:...

Tor Linux Sandbox Breakout Via X11

Tor: Linux sandbox breakout via X11 From inside the Linux sandbox described in https://blog.torproject.org/blog/tor-browser-70-released, it is still possible to talk to the X server without any restrictions. This means that a compromised browser can e.g. use the XTEST X protocol extension at...

WordPress S3Bubble Amazon S3 Video And Audio Streaming With Analytics Plugin Arbitrary File Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.S3Bubble Amazon S3 Video And Audio Streaming With Analytics is a plugin for getting secure streaming from Amazon S3 to the Wordpress website in a plugin...