jellyfin -- Multiple vulnerabilities

[email protected] reports: Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the ClientLogController, specifically /ClientLog/Document. When combined with a cross-site scripting...

Jellyfin suffers from an SSRF vulnerability (CNVD-2023-52831)

Jellyfin is a free software media system. Jellyfin suffers from an SSRF vulnerability that can be exploited by an attacker to access web resources and sensitive information via a crafted POST request...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

Server side request forgery (ssrf)

Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery SSRF attacks via the imageUrl parameter. This issue potentially exposes both internal and...

CVE-2021-29490

CVE-2021-29490 – Jellyfin SSRF . Jellyfin 10.7.2 and older are vulnerable to unauthenticated Server-Side Request Forgery via the imageUrl parameter, potentially exposing internal and external HTTP resources visible to the Jellyfin server. The issue is patched in version 10.7.3. A workaround is to...

CVE-2021-21402

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

CVE-2021-21402

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

CVE-2021-21402 Unauthenticated Arbitrary File Access in Jellyfin

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...

CVE-2021-21402

Summary of CVE-2021-21402 (Jellyfin) : A local/file read vulnerability exists in Jellyfin before version 10.7.1, enabling an attacker to read arbitrary files from the server’s filesystem via crafted requests. The issue is more prevalent when Windows is the host OS and affected servers exposed to ...

Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60315)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

File Upload Vulnerability in Beijing Century Sunflower Streaming Media Service System (KMS 3.0) up***.php Page

Beijing Century Sunflower Streaming Media Service System KMS 3.0 is an audio and video application platform based on IP network, integrating live broadcasting system, video-on-demand system, video broadcasting system, as well as sub-systems such as data distribution and business management. A fil...

Cross-Site Scripting Vulnerability in TRS MAS of Beijing Tops Information Technology Co.

TRS MAS is a universal media management system based on the characteristics of audio and video usage in the mobile Internet era. The same audio and video resources can be provided for different terminal platforms, effectively saving costs and simplifying operations. TRS MAS has a cross-site...

Cross-site Scripting Vulnerability in Infinite Streaming Media System (AMS) of Beijing Zhongshi Media Technology Co.

Infinite Streaming Media System AMS is a complete set of IP network-based audio/video application platform, integrating CTVTV's live video broadcasting system, video-on-demand VOD system, video broadcasting system and video production sub-systems, aiming to provide users with a complete set of...

Global Reflective XSS Vulnerability in Qibo News Media System

Qibo news media system is Qibo software company using PHP language developed specifically for the news station and launched a web content management system to provide from the content release, organization, dissemination, interaction and data mining media site integration solutions. Qibo News Med...

SQL injection vulnerability in the user_name parameter of Request.aspx page of Nanjing Fargo Streaming Media System.

Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio/video and mobile communication and other related...

Ancient streaming media system /VIEWGOOD/ADI/portal/UserDataSync. aspx file UserGUID parameter SQL injection vulnerability

No description provided by source...

CVE-2016-1654

The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service invalid read operation via unknown vectors...

Vicworl 新闻媒体系统 /data/backup/ 敏感信息泄露

No description provided by source...

齐博cms所有产品发现后门

简要描述： 在另一个地方又发现后门了，敢不放后门吗？ 还有，压缩包下载下来的时候，360直接报有phpshell，360都看不下去了 = = 详细说明： 齐博cms整站系统 后门文件 ../hack/upgrade/admin.php CRC32 28510105 以及剩下的存在于博客系统 下载系统 考试系统 黄页系统 新闻媒体系统 图片系统 视频系统 知道系统 企业系统 B2B系统 等等（反正官网所有的下载包里都有这个后门）文件在 ../hack/upgrade/admin.php CRC32 5101A2EE...