Universal Media Server 13.2.1 Cross Site Scripting

Exploit Title: Universal Media Server 13.2.1 Cross Site Scripting Google Dork: NA Date: 01/04/2023 Exploit Author: Yehia Elghaly - Mrvar0x Vendor Homepage: https://www.universalmediaserver.com/ Software Link: https://www.universalmediaserver.com/download/ Version: 13.2.1 Tested on: Windows 7 / 10...

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

Information disclosure

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

CVE-2022-39914

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

CVE-2022-39914

The CVE-2022-39914 entry describes an information-disclosure vulnerability in Samsung DisplayManagerService prior to Android T (13). A local attacker could access information about connected DLNA devices due to exposure of sensitive data by DisplayManagerService. The available sources indicate th...

PT-2022-25108

Name of the Vulnerable Software and Affected Versions Samsung DisplayManagerService versions prior to Android T13 Description The issue allows a local attacker to access sensitive information, specifically connected DLNA device information, due to exposure of sensitive information from an...

CVE-2022-39914: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to Android T13 allows local attacker to access connected DLNA device information...

CVE-2022-38325

Tenda AC15 WiFi Router V15.03.05.19multi and AC18 WiFi Router V15.03.05.19multi were discovered to contain a buffer overflow via the filePath parameter at /goform/expandDlnaFile...

Tenda AC15 安全漏洞

Tenda AC15 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC15 WiFi Router version V15.03.05.19multi, AC18 WiFi Router version V15.03.05.19multi, which originates from the discovery of a buffer overflow vulnerability via the filePath parameter in...

PT-2022-24368 · Tenda · Tenda Ac18 Wifi Router +1

Name of the Vulnerable Software and Affected Versions: Tenda AC15 WiFi Router version V15.03.05.19 multi Tenda AC18 WiFi Router version V15.03.05.19 multi Description: A buffer overflow issue was discovered via the filePath parameter at the "/goform/expandDlnaFile" API endpoint. Recommendations:...

VideoServer 路径遍历漏洞

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

[SECURITY] [DLA 2973-1] minidlna security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2973-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 10, 2022 https://wiki.debian.org/LTS -...

UBUNTU-CVE-2022-26505

A DNS rebinding issue in ReadyMedia formerly MiniDLNA before 1.3.1 allows a remote web server to exfiltrate media files...

Siemens Siveillance Video DLNA Server Path Traversal Vulnerability

Siemens Siveillance Video DLNA Server is a video DLNA server from Siemens, a German company, that is vulnerable to a path traversal vulnerability that could be exploited by remote attackers to access any file outside the application's Web document directory. Any file...

CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server 2019 R1, Siveillance Video DLNA Server 2019 R2, Siveillance Video DLNA Server 2019 R3, Siveillance Video DLNA Server 2020 R1, Siveillance Video DLNA Server 2020 R2, Siveillance Video DLNA Server 2020 R3, Siveillance Video DLNA...

CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server 2019 R1, Siveillance Video DLNA Server 2019 R2, Siveillance Video DLNA Server 2019 R3, Siveillance Video DLNA Server 2020 R1, Siveillance Video DLNA Server 2020 R2, Siveillance Video DLNA Server 2020 R3, Siveillance Video DLNA...

Path traversal

A vulnerability has been identified in Siveillance Video DLNA Server 2019 R1, Siveillance Video DLNA Server 2019 R2, Siveillance Video DLNA Server 2019 R3, Siveillance Video DLNA Server 2020 R1, Siveillance Video DLNA Server 2020 R2, Siveillance Video DLNA Server 2020 R3, Siveillance Video DLNA...

CVE-2021-42021

A vulnerability has been identified in Siveillance Video DLNA Server 2019 R1, Siveillance Video DLNA Server 2019 R2, Siveillance Video DLNA Server 2019 R3, Siveillance Video DLNA Server 2020 R1, Siveillance Video DLNA Server 2020 R2, Siveillance Video DLNA Server 2020 R3, Siveillance Video DLNA...

CVE-2021-42021

Siemens Siveillance Video DLNA Server is affected across 2019 R1–2021 R1 builds. The flaw is a path traversal vulnerability (CWE-26) that could allow an unauthenticated, remote attacker to read arbitrary files outside the web document directory, exposing sensitive information. ICSA-21-315-13 and ...