QNAP NAS 'Media Library' Command Execution Vulnerability (NAS-201709-15)

QNAP QTS is prone to a command execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

WordPress audio playlist functionality is affected by Cross-Site Scripting

Abstract Two Cross-Site Scripting vulnerabilities exists in the playlist functionality of WordPress. These issues can be exploited by convincing an Editor or Administrator into uploading a malicious MP3 file. Once uploaded the issues can be triggered by a Contributor or higher using the playlist...

WordPress 4.5.3 Audio Playlist Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 20...

WordPress 4.5.3 Audio Playlist Cross Site Scripting

------------------------------------------------------------------------ WordPress audio playlist functionality is affected by Cross-Site Scripting ------------------------------------------------------------------------ Yorick Koster, July 2016...

Joomla MediaLibrary Basic Component SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla MediaLibrary Basic component. An attacker can exploit the vulnerability to access or modify database data...

LMCMS v4.0全媒体库任意文件下载漏洞

No description provided by source...

olympus.be XSS vulnerability

Vulnerable URL: https://www.olympus.be/corporate/fr/presscentre/imagesandmedia/medialibrary.jsp?c==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

LMCMS Backend Arbitrary File Upload Vulnerability

LMCMS Leming CMS system is a web content management system developed in Java language, developed by Beijing Leming Zhixin Technology Co., Ltd. and distributed under commercial license. LMCMS Leming CMS system's management background under the full media library section of the file management to...

LMCMS background arbitrary file download vulnerability

LMCMS Leming CMS system is a web content management system developed in Java language, developed by Beijing Leming Zhixin Technology Co., Ltd. and distributed under commercial license. LMCMS Leming CMS system's management background under the full media library section of the file management to...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability in the media/libmedia/IDrm.cpp component of the Android operating system fails to initialize the data structure for the key request. Exploiting this vulnerability could allow a malicious actor to obtain confidential information or bypass security mechanisms...

The vulnerability of the Android operating system allows a hacker to bypass security measures and obtain confidential information.

The vulnerability of the BnCrypto::onTransact function media/libmedia/ICrypto.cpp in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability could allow a malicious actor to bypass security measures and obtain confidential information, leading to incorrect...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the apngencodeframe and encodeapng functions in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects by using a specially created .avi file...

Microsoft Windows Media Remote Code Execution Vulnerabilities (3143146)

This host is missing a critical security update according to Microsoft Bulletin MS16-027 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media Parsing Remote Code Execution (MS16-027: CVE-2016-0101)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly handles resources in the media library. A remote attacker can exploit this issue by enticing a victim to open specially crafted media content...

Pitivi Arbitrary Command Execution Vulnerability

Pitivi is a suite of open source video editing software written in Python and based on GStreamer and GTK+. The software provides a timeline in order to achieve complete control over the video. A security vulnerability exists in Pitivi versions prior to 0.95, which stems from an error in the...

Updated pitivi packages fix security vulnerability

In pitivi before 0.95, double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code execution with the permissions of the user running Pitivi CVE-2015-0855...

CVE-2015-3834

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

pitivi -- code execution

Luke Farone reports: Double-clicking a file in the user's media library with a specially-crafted path or filename allows for arbitrary code execution with the permissions of the user running Pitivi...

WordPress GI-Media Library Plugin Directory Traversal Vulnerability

This module exploits a directory traversal vulnerability in WordPress Plugin GI-Media Library version 2.2.2, allowing to read arbitrary files from the system with the web server privileges. This module has been tested successfully on GI-Media Library version 2.2.2 with WordPress 4.1.3 on Ubuntu...

GI-Media Library <= 2.2.2 - Arbitrary File Download

The gi-media-library WordPress plugin was affected by an Arbitrary File Download security vulnerability. /wp-content/plugins/gi-media-library/download.php?fileid=Li4vLi4vLi4vd3AtY29uZmlnLnBocA== Where "Li4vLi4vLi4vd3AtY29uZmlnLnBocA==" is "../../../wp-config.php" Base64 encoded...