VideoLAN VLC Media Player 2.2.1 - m3u8m3u Crash (PoC)

VideoLAN VLC Media Player 2.2.1 - m3u8m3u Crash PoC !/usr/bin/python VLC media player 2.2.1 m3u8/m3u Crash Proof Of Concept Author: Naser Farhadi Date: 25 August 2015 Version: 2.2.1 Tested on: Windows 7 SP1 32 bit """ ModLoad: 71ae0000 71b64000...

VLC Media Player 2.2.1 - m3u8/m3u Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python VLC media player 2.2.1 m3u8/m3u Crash Proof Of Concept Author: Naser Farhadi Date: 25 August 2015 Version: 2.2.1 Tested on: Windows 7 SP1 32 bit """ ModLoad: 71ae0000 71b64000...

WordPress Live Streaming Integration Plugin <= 4.29.6 - XSS

This plugin is prone to videowhisperstreaming.php multiple parameter cross site scripting vulnerability. Solution Update plugin...

Discuz!3.0-3.2版本的通杀xss存储漏洞（需开始直播功能）

简要描述： 这个必须得高危啊！！！！！！！！！！！ 来个雷劈可好？ 详细说明： 小白不会审计代码 然后咱们就直接进入主题吧！ discuz3.0-3.2有个功能叫直播的。实习版主就能开启哈 接着咱们就用admin帐号先把一个帖子弄成直播！ 接着。我们用新注册的用户。。咳咳。得等两分钟。再能发话哈 然后用等待的时间去进行弄exp 弄成base16的 点击发表 呵呵。弹窗了 漏洞证明： 来。接着 discuz 3.1版本测试...

WordPress VideoWhisper Live Streaming Integration Plugin Unrestricted File Upload (CVE-2014-1905)

An unauthorized file upload vulnerability has been reported in VideoWhisper Live Streaming Integration plugin for WordPress. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could...

CVE-2014-1908

The error-handling feature in 1 bp.php, 2 videowhisperstreaming.php, and 3 ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error messag...

Unrestricted file upload

Unrestricted file upload vulnerability in ls/vwsnapshots.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, and then accessing the file via a direct request to a...

CVE-2014-1908

CVE-2014-1908 affects the WordPress VideoWhisper Live Streaming Integration plugin, specifically versions before 4.29.5. The vulnerable components are bp.php, videowhisper_streaming.php, and ls/rtmp.inc.php, where faulty error handling allows remote attackers to trigger errors that reveal the ful...

CVE-2014-1908

The error-handling feature in 1 bp.php, 2 videowhisperstreaming.php, and 3 ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error messag...

VideoWhisper Live Streaming Integration < 4.27.2 - Cross-Site Scripting (XSS)

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

VideoWhisper Live Streaming Integration 4.29.6 - videowhisper_streaming.php Multiple Parameter XSS

The Broadcast Live Video – Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP WordPress plugin was affected by a videowhisperstreaming.php Multiple Parameter XSS security vulnerability...

CVE-2014-4569

Cross-site scripting XSS vulnerability in ls/vvlogin.php in the VideoWhisper Live Streaming Integration plugin 4.27.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomname parameter...

CVE-2014-4569

CVE-2014-4569 affects WordPress via the VideoWhisper Live Streaming Integration Plugin (versions 4.27.2 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in ls/vv_login.php that allows remote attackers to inject arbitrary script or HTML through the room_name parameter. The issu...

WordPress VideoWhisper Live Streaming Integration Plugin <= 4.27.2 - XSS

Because of this vulnerability in ls/vvlogin.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress VideoWhisper Live Streaming Integration Multiple Vulnerabilities

WordPress VideoWhisper Live Streaming Integration Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-1907

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to 1 read arbitrary files via a .. dot dot in the s parameter to ls/rtmplogin.php or 2 delete arbitrary files via a .. dot dot in the s parameter t...

CVE-2014-1906

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 m parameter to lbstatus.php; 2 msg parameter to vcchatlog.php; n parameter to 3 channel.php, ...

CVE-2014-1907

Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to 1 read arbitrary files via a .. dot dot in the s parameter to ls/rtmplogin.php or 2 delete arbitrary files via a .. dot dot in the s parameter t...

CVE-2014-1906

CVE-2014-1906 concerns the VideoWhisper Live Streaming Integration plugin for WordPress. The vulnerability involves multiple cross-site scripting (XSS) flaws in the plugin prior to version 4.29.5, allowing remote attackers to inject arbitrary script or HTML through various parameters (lb_status.p...