100 matches found
CVE-2026-125079
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
EUVD-2026-120655
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
CVE-2026-125079 D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
CVE-2026-125079
A vulnerability exists in the Media Service component of the D-Link DCS-6501LH (version 3.03.02). The issue resides in the pf_get_onvif_user_pwd/mydlink_default_sys_info function within the file /mnt/conf/SystemConfig.ini. Manipulation of the pin_code argument results in the use of hard-coded cre...
CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.02
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...
PT-2026-141273
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pf get onvif user pwd/mydlink default sys info of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pin code causes hard-coded credentials. It is possible to...
PT-2026-126368
REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex media service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can race the sanitizer or exhaust memory limits to leave...
ONVIF Snapshot Grab
Authenticate to ONVIF Media service, resolve GetSnapshotUri for the first profile, and download a JPEG snapshot. Prefers an ONVIF session. !/usr/bin/env python3 -- coding: utf-8 -- """Fetch an ONVIF snapshot JPEG via GetSnapshotUri.""" from kittysploit import from lib.protocols.onvif.session impo...
Mealie security vulnerability
Mealie is a self-hosted recipe manager and meal planner developed by Hayden in the United States. Version 3.3.1 of Mealie contains a security vulnerability. This vulnerability stems from the use of storage-oriented cross-site scripting in the recipe asset upload and media service components. It m...
CVE-2019-16650
On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...
CVE-2019-16649
On Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and authentication problems in the virtual media service allows capture of BMC credentials and data transferred over virtual media devices. Attackers can use captured credentials to connect virtual USB devices to...
EUVD-2019-7215
Malware in sbrugna...
EUVD-2019-7216
Malware in sbrugna...
EUVD-2020-11959
Malware in sbrugna...
EUVD-2020-2135
Malware in sbrugna...
EUVD-2016-4777
Malware in sbrugna...
EUVD-2016-7393
Malware in sbrugna...
EUVD-2022-50104
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-3913
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, an...
