1219 matches found
CVE-2014-9181
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. dot dot in the URI to 1 manage/ or 2 web/ or remote authenticated users to read arbitrary files via a .. dot dot in the URI to resources/...
Directory traversal
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. dot dot in the URI to 1 manage/ or 2 web/ or remote authenticated users to read arbitrary files via a .. dot dot in the URI to resources/...
CVE-2014-9181
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. dot dot in the URI to 1 manage/ or 2 web/ or remote authenticated users to read arbitrary files via a .. dot dot in the URI to resources/...
CVE-2014-9181
Plex Media Server (pre-0.9.9.3) is affected by CVE-2014-9181, which describes multiple directory traversal vulnerabilities that allow an attacker to read arbitrary files by supplying a .. sequence in the URI to endpoints such as manage/, web/, or resources/. The Red Hat advisory and CVE records c...
LIVE555 Media Server 2007.11.1 ParseRTSPRequestString Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to crash the application, resulting in...
Plex Media Server 0.9.9.2.374-aa23a69 - Multiple Vulnerabilities
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20140228-1 ======================================================================= title: Authentication bypass SSRF and local file disclosure product: Plex Media Server vulnerable version: =0.9.9.2.374-aa23a69 fix...
firefly media server (mt-daapd) 2.4.1 / svn 1699 - Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HT...
Flussonic Media Server 4.1.25 4.3.3 - Arbitrary File Disclosure
Flussonic Media Server 4.1.25 4.3.3 - Arbitrary File Disclosure Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with...
Flussonic Media Server 4.1.25 - 4.3.3 - Aribtrary File Disclosure Vulnerability
Exploit for aix platform in category dos / poc Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many...
TVersity <= 1.9.7 Arbitrary File Download
No description provided by source. Luigi Auriemma Application: TVersity http://tversity.com Versions: = 1.9.7 Platforms: Windows Bug: arbitrary files downloading Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...
Firefly Media Server <= 0.2.4 - Remote Denial of Service Exploit
No description provided by source. !C:\python25\python25.exe Advisory : UPH-07-02 mt-dappd/Firefly media server remote DoS Discovered by nnp http://www.unprotectedhex.com import sys import socket import time if lensys.argv != 3: sys.exit-1 killmsg = GET /xml-rpc?method=stats HTTP/1.1\r\n...
Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow
No description provided by source. $Id: ms03022nsiislogpost.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...
Flussonic Media Server 4.1.25 < 4.3.3 - Arbitrary File Disclosure
Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols, including HDS, HLS, RTMP, RTSP, HTTP,...
Keene Digital Media Server 1.0.2 Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11111/info Keene Digital Media Server is prone to multiple cross-site scripting vulnerabilities. These issues span multiple scripts. The source of the problem is that affected scripts do not sufficiently sanitize external...
keene digital media server 1.0.2 - Directory Traversal variant vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory...
Flussonic Media Server < 4.3.4 Multiple Vulnerabilities - Active Check
Flussonic Media Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Flussonic Media Server 4.3.3 File Read / Directory Listing
Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols, including HDS, HLS, RTMP, RTSP, HTTP,...
SEC Consult SA-20140411-0 :: Multiple vulnerabilities in Plex Media Server
SEC Consult Vulnerability Lab Security Advisory 20140411-0 ======================================================================= title: Multiple vulnerabilities product: Plex Media Server vulnerable version: confirmed in 0.9.9.10 fixed version: none impact: High homepage: http://www.plex.tv...
Plex Media Server multiple security vulnerabilities
Information leakage, protection bypass, CSRF...
Plex Media Server 0.9.9.10 CSRF / Disclosure
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Plex Media Server vulnerable version: confirmed in 0.9.9.10 fixed version: none impact: High homepage: http://www.plex.tv found:...