Huashi Private Cloud CDN Live Streaming Acceleration Server 安全漏洞

Huashi Private Cloud CDN Live Streaming Acceleration Server is a live streaming acceleration service from China Huashi. A security vulnerability exists in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport version v.1.1.2, which originates from a vulnerability that allow...

PT-2024-23733 · Huashi · Huashi Private Cloud Cdn Live Streaming Acceleration Server

Name of the Vulnerable Software and Affected Versions: Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport version 1.1.2 Description: An issue in the Huashi Private Cloud CDN Live Streaming Acceleration Server allows a remote attacker to execute arbitrary code via the...

CVE-2024-31032: Improper Control of Generation of Code

An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attacker to execute arbitrary code via the manager/ipping.php component...

CVE-2024-28853

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-28853

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-28852

Ampache (web-based audio/video streaming and file manager) has multiple reflective XSS vulnerabilities affecting forms that use the rule variable. Exploitation could involve injecting payloads in queries (e.g., song, podcast) via the $rule parameter. The issue is fixed in version 6.3.1; upgrading...

CVE-2024-28853 Ampache Stored XSS

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting XSS vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of...

CVE-2024-28852: Improper Neutralization of Input During Web Page Generation

Ampache is a web based audio/video streaming application and file manager. Ampache has multiple reflective XSS vulnerabilities,this means that all forms in the Ampache that use rule as a variable are not secure. For example, when querying a song, when querying a podcast, we need to use $rule...

Best Practices for Kafka Management to Ensure High Availability

By Uzair Amir With the increasing popularity of Apache Kafka as a distributed streaming platform, ensuring its high availability has become… This is a post from HackRead.com Read the original post: Best Practices for Kafka Management to Ensure High Availability...

Siemens SIMATIC and SCALANCE Products Encryption Strength (CVE-2023-0215)

The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...

CVE-2024-29026

Owncast (github.com/owncast/owncast) is affected by CVE-2024-29026 due to a lenient CORS policy in versions 0.1.2 and earlier, allowing cross-origin requests to read privileged information and potentially leak the admin password. The root cause is improper cross-origin access control, as describe...

net.n2oapp.datastreaming:data-streaming (>=7.3.1, <=7.7.9), org.apache.cxf.systests:cxf-systests-databinding (2.2.12) +9 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.2.12)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - net.n2oapp.datastreaming:data-streaming =7.3.1, =7.7.9 -...

[SECURITY] Fedora 38 Update: python-multipart-0.0.7-1.fc38

python-multipart is an Apache2 licensed streaming multipart parser for Python...

[SECURITY] Fedora 39 Update: python-multipart-0.0.7-1.fc39

python-multipart is an Apache2 licensed streaming multipart parser for Python...

Fedora: Security Advisory for jackson-core (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: t-digest-3.2-8.fc40

A new data structure for accurate on-line accumulation of rank-based statisti cs eg. quantiles and trimmed means. The t-digest algorithm is also very parallel friendly making it useful in map-reduce and parallel streaming applications...

[SECURITY] Fedora 40 Update: json_simple-1.1.1-34.fc40

JSON.simple is a simple Java toolkit for JSON. You can use JSON.simple to encode or decode JSON text. Full compliance with JSON specification RFC4627 and reliable Provides multiple functionalities such as encode, decode/parse and escape JSON text while keeping the library lightweight Flexible,...

[SECURITY] Fedora 40 Update: jackson-core-2.16.1-4.fc40

Core part of Jackson that defines Streaming API as well as basic shared abstractions...

[SECURITY] Fedora 40 Update: jackson-databind-2.16.1-4.fc40

The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...

BIT-SOLR-2023-50298 Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. Solr Streaming Expressions allows users to extract data from other Solr Clouds, using a "zkHost" parameter. When original...