DEBIAN-CVE-2011-3623

Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via 1 a crafted ASF file, related to the ASFObjectDumpDebug function in modules/demux/asf/libasf.c; 2 a crafted AVI file, related to the AVIChunkDumpDebuglevel function...

Cross site scripting

Cross-site scripting XSS vulnerability in snetwork.asp in the Denon AVR-3313CI audio/video receiver allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to Friendlyname...

CVE-2014-8508

The CVE-2014-8508 vulnerability affects the Denon AVR-3313CI web portal, specifically the s_network.asp page. The root cause is a persistent cross-site scripting (XSS) flaw where unsanitized user-supplied data in parameters related to Friendlyname is reflected and executed. Impact stated in sourc...

Allomani Audio and Video Library 2.7.0 - CSRF Vulnerability (Add Admin)

No description provided by source. Audio & Video Library 2.7.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/audioandvideoscript.html === Exploit === form method=POST...

IBM Sametime Connect日志信息泄漏漏洞

Bugtraq ID:65937 CVE ID:CVE-2014-0890 IBM Sametime提供了一套整合的企业级即时通讯软件,能够更轻松地查找和联系同事、客户和业务合作伙伴,并展开协作,极大地提高员工实时沟通的能力。 如果用户设置日志标记至高级别，使用Audio/Video聊天时，应用会把用户密码以明文方式或编码的方式存储，允许攻击者利用漏洞获取敏感信息。 0 IBM Sametime Connect 8.5.1 IBM Sametime Connect 8.5.1.1 IBM Sametime Connect 8.5.1.2 IBM Sametime Connect 8.5....

IBM Lotus Sametime Connect Audio / Video Chat Information Disclosure

The version of IBM Lotus Sametime Connect installed on the remote Windows host is potentially affected by an information disclosure vulnerability. If a user sets a certain log flag to high and uses Audio/Video chat, the user's password is stored in plaintext unencrypted. C Tenable Network Securit...

CVE-2014-0890

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony..level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by...

Information disclosure

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony..level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by...

CVE-2014-0890

The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, 8.5.2.1, 9.0, and 9.0.0.1, when a certain com.ibm.collaboration.realtime.telephony..level setting is used, logs cleartext passwords during Audio/Video chat sessions, which allows local users to obtain sensitive information by...

Google Chrome Inbuilt Flash player allows Webcam Hacking

No longer limited to Hollywood movies about cybercrime, webcam hacking has stealthily and aggressively broken into average households "I've heard a hacker could access my webcam and watch me in front of my computer. Could this really happen?" YES, other than using a Remote administration tools, i...

Opial CMS v2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Opial CMS v2.0 - Multiple Web Vulnerabilities Introduction: ============= Opial lets you create audio mp3/ram/rm/avi/mpg/wav/ai f or any other format audio/video downloads website, in 10 seconds you will be able to install opial ...

Opial CMS 2.0 XSS / SQL Injection / Shell Upload

Title: ====== Opial CMS v2.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=522 VL-ID: ===== 522 Introduction: ============= Opial lets you create audio mp3/ram/rm/avi/mpg/wav/ai f or any other format audio/video...

Polycom Audio/Video Server Detection

Binary data 6289.prm...

openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

Allomani Audio And Video Library 2.7.0 Cross Site Request Forgery

Audio & Video Library 2.7.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/audioandvideoscript.html === Exploit ===...

Allomani Audio and Video Library 2.7.0 - Cross-Site Request Forgery (Add Admin)

Allomani Audio and Video Library 2.7.0 - Cross-Site Request Forgery Add Admin Audio & Video Library 2.7.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script :...

Allomani Audio and Video Library 2.7.0 - Cross-Site Request Forgery (Add Admin)

Audio & Video Library 2.7.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/audioandvideoscript.html === Exploit ===...

Fedora 14 : telepathy-gabble-0.10.5-1.fc14 (2011-1668)

Security bugfix release that includes the following : - fd.o 31412: fix crashes during disconnection if a PEP alias request is in-flight - fd.o34048: Malicious contacts can no longer trick Gabble into relaying audio/video data via a server of their choosing. Note that Tenable Network Security has...

Sql injection

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4735

CVE-2009-4735 affects Allomani Audio & Video Library (Songs & Clips version) 2.7.0. The vulnerability is an SQL injection in login.php exposed via the username parameter in a login action, allowing remote attackers to execute arbitrary SQL commands. The available sources corroborate this descript...