Lucene search
+L

1219 matches found

zdt
zdt
added 2020/08/22 12:00 a.m.472 views

Eibiz i-Media Server Digital Signage 3.8.0 Authentication Bypass Exploit

Eibiz i-Media Server Digital Signage version 3.8.0 suffers from unauthenticated privilege escalation and arbitrary user creation vulnerability that allows authentication bypass. Once serialized, an AMF encoded object graph may be used to persist and retrieve application state or allow two endpoin...

7.7AI score
SaveExploits0
zdt
zdt
added 2020/08/22 12:00 a.m.527 views

Eibiz i-Media Server Digital Signage 3.8.0 Remote Privilege Escalation / Account Takeover Exploit

Eibiz i-Media Server Digital Signage version 3.8.0 suffers from an unauthenticated remote privilege escalation and account takeover vulnerability that can be triggered by directly calling the updateUser object part of ActionScript object graphs, effectively elevating to an administrative role or...

7.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/08/21 12:00 a.m.355 views

Eibiz i-Media Server Digital Signage 3.8.0 Authentication Bypass

!/usr/bin/env python3 -- coding: utf-8 -- Eibiz i-Media Server Digital Signage 3.8.0 createUser Authentication Bypass Add Admin Vendor: EIBIZ Co.,Ltd. Product web page: http://www.eibiz.co.th Affected version: =3.8.0 Summary: EIBIZ develop advertising platform for out of home media in that time t...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/08/21 12:00 a.m.383 views

Eibiz i-Media Server Digital Signage 3.8.0 Remote Privilege Escalation / Account Takeover

!/usr/bin/env python3 -- coding: utf-8 -- Eibiz i-Media Server Digital Signage 3.8.0 Remote Privilege Escalation / Account Takeover Vendor: EIBIZ Co.,Ltd. Product web page: http://www.eibiz.co.th Affected version: =3.8.0 Summary: EIBIZ develop advertising platform for out of home media in that ti...

1.1AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2020/08/21 12:00 a.m.185 views

Eibiz i-Media Server Digital Signage 3.8.0 Configuration Disclosure

Summary EIBIZ develop advertising platform for out of home media in that time the world called "Digital Signage". Because most business customers still need get outside to get in touch which products and services. Online media alone cannot serve them right place, right time. Description i-Media...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/08/21 12:00 a.m.453 views

Eibiz i-Media Server Digital Signage 3.8.0 Configuration Disclosure

Eibiz i-Media Server Digital Signage 3.8.0 Configuration Disclosure Vendor: EIBIZ Co.,Ltd. Product web page: http://www.eibiz.co.th Affected version: =3.8.0 Summary: EIBIZ develop advertising platform for out of home media in that time the world called "Digital Signage". Because most business...

7.4AI score
SaveExploits0
OSV
OSV
added 2020/08/11 8:15 p.m.10 views

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/11 8:15 p.m.6 views

CVE-2020-0242

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

7.8CVSS7.2AI score0.00244EPSS
SaveExploits0References1
NVD
NVD
added 2020/08/11 8:15 p.m.23 views

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.8AI score0.00153EPSS
SaveExploits0References1
Prion
Prion
added 2020/08/11 8:15 p.m.20 views

Design/Logic Flaw

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

7.2CVSS8.1AI score0.00244EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/08/11 8:15 p.m.17 views

Design/Logic Flaw

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.2CVSS8.1AI score0.00153EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/11 7:28 p.m.24 views

CVE-2020-0243

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.9AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/08/11 7:27 p.m.45 views

CVE-2020-0242

In reset of NuPlayerDriver.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

7.9AI score0.00244EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/11 7:27 p.m.122 views

CVE-2020-0242

CVE-2020-0242 describes a use-after-free in the Android media framework due to improper locking in NuPlayerDriver.cpp. The effect is local escalation of privilege in the media server with no additional execution privileges required, and exploitation requires local access (no user interaction). Af...

7.8CVSS7.7AI score0.00244EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2020/08/04 3:27 a.m.60 views

Exploit for Classic Buffer Overflow in Acti Nvr

cve-2020-15956 ACTi NVR 2.3 Standard/Professional Server and A...

7.5CVSS7.8AI score0.16158EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:00 a.m.17 views

Plex Media Server Installed (Linux)

Binary data plexmediaserverinstalledlinux.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/07/23 12:00 a.m.17 views

Plex Media Server Installed (Mac OS X)

Binary data macosxplexmediaserverinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/18 12:00 a.m.22 views

Plex Media Server Installed (Windows)

Binary data plexwininstalled.nbin...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2020/06/16 12:00 a.m.12 views

Plex Media Server Improper Access Control Vulnerability

Plex Media Server is a set of media player and media server software from the Swiss company Plex. An improper access control vulnerability exists in versions of Plex Media Server prior to 2020-6-15. An attacker could exploit this vulnerability to execute cross-origin application requests via any...

8.8CVSS6.9AI score0.01415EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/15 8:15 p.m.9 views

CVE-2020-5742

Improper Access Control in Plex Media Server prior to June 15, 2020 allows any origin to execute cross-origin application requests...

8.8CVSS7.4AI score0.01415EPSS
SaveExploits1References1
Rows per page
Query Builder