28144 matches found
Subtitle Hack Leaves 200 Million Vulnerable to Remote Code Execution
A proof of concept attack using malicious video subtitle files reveals how adversaries can execute remote code on PCs, Smart TVs and mobile devices using popular video players and services such as VLC Media Player, Kodi, Stremio and Popcorn Time. “This is a brand new attack vector. We haven’t see...
KLA11023 Multiple vulnerabilities in VideoLAN VLC Media Player
Multiple serious vulnerabilities have been found in VideoLAN VLC Media Player. Malicious users can exploit these vulnerabilities to cause a denial of service or execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap out-of-bound read in CreateHtmlSubtitle and in ParseJSS can...
Cameradar - An RTSP Surveillance Camera Access Multitool
Cameradar hacks its way into RTSP CCTV cameras Cameradar allows you to: Detect open RTSP hosts on any accessible target Get their public info hostname, port, camera model, etc. Launch automated dictionary attacks to get their stream route for example /live.sdp Launch automated dictionary attacks ...
Null pointer dereference
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine...
Design/Logic Flaw
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine...
CVE-2017-4915
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine...
CVE-2017-4915
Summary (validated data): CVE-2017-4915 is a local privilege-escalation vulnerability in VMware Workstation Pro/Player on Linux caused by insecure loading of libraries via the ALSA sound driver configuration files (.asoundrc). The issue allows unprivileged host users to elevate privileges to root...
CVE-2017-4916
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine...
CVE-2017-4916
CVE-2017-4916 is a NULL pointer dereference in the vstor2 driver affecting VMware Workstation Pro/Player (12.x). Public sources document denial-of-service via local exploitation on Windows hosts with normal user privileges. Several references tie the issue to VMware Workstation 12.x before 12.5.5...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the BitmapData class in the Flash Player software platform arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player software is related to the use of memory after it is freed when hiding screen objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the AVC kernel of the Adobe Flash Player arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the ConvolutionFilter class in the Flash Player software platform arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code memory corruption...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player class in the software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the BlendMode class in the Flash Player software platform arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code
The vulnerability of the Flash Player’s screen object masking processing service is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...
Updated flash-player-plugin packages fix security vulnerability
Adobe Flash Player 25.0.0.171 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This updates resolves a use-after-free vulnerability that could lead to code execution CVE-2017-3071. This...
MGASA-2017-0143 Updated flash-player-plugin packages fix security vulnerability
Adobe Flash Player 25.0.0.171 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This updates resolves a use-after-free vulnerability that could lead to code execution CVE-2017-3071. This...
WD TV Live Media Player - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application WD TV Live Media Player published at the 'play' market has multiple vulnerabilities...
Xtream IPTV Player - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Xtream IPTV Player published at the 'play' market has multiple vulnerabilities...