[SECURITY] Fedora 35 Update: mingw-gstreamer1-1.19.3-1.fc35

GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...

CVE-2021-36326

Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...

CVE-2021-36330

Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...

CVE-2021-36329

Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...

CVE-2021-36328

Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database...

How Imperva Leverages AWS to Help Customers Prevent Attacks

At Imperva, we’re passionate about being a trusted security partner for our customers, so we continually invest in the availability, resiliency, and scalability of our global network. We’ve made significant investments over the past year to expand our cloud footprint, including rebuilding and...

Mozilla Firefox Security Advisory (MFSA2014-81) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

GNUMP3d streaming multimedia server symbolic link DoS

The vulnerability of the GNUMP3d streaming multimedia server in OpenSUSE Leap operating systems is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

What is Twitch?

Twitch is primarily a site dedicated to live streaming content. It also offers the ability to chat with others in the Stream you happen to be in via text. The primary draw of Twitch streams is video games and e-sports, leading to the rise of many big name streamers and content creators. Is Twitch...

Pirate Sports Streamer Gets Busted, Pivots to MLB Extortion

Demanding payment in exchange for not publicly disclosing a vulnerability isn’t the same as a bug bounty program; it’s extortion. A 30-year-old alleged sports content pirate in Minneapolis, Minn., has found himself on the receiving end of a criminal complaint alleging that he not only stole user...

CVE-2021-25878

AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator...

PVS Target Devices experience long boot times with HP servers and Virtual Connects

When streaming a vDisk to a target device on a hypervisor leveraging HP servers and virtual connects, admins may see longer than usual boot time...

easyvvuq (>=0.5.2.1, <=0.5.2.2), pdfner (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2021-42343 via dask (2.9.0)

dask PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dask and may be impacted: - easyvvuq =0.5.2.1, =0.1.0, =0.0.7, =3.2.13, =3.4.5 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-387...

streaming-anomaly-detection (>=0.0.7, <=0.0.9) potentially affected by CVE-2021-42343 via distributed (2.21.0)

distributed PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - streaming-anomaly-detection =0.0.7, =0.0.9 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

CVE-2021-34362

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Med...

Command injection

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Med...

CVE-2021-34362 Command Injection Vulnerability in Media Streaming Add-on

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Med...

CVE-2021-34362

CVE-2021-34362 is a command-injection vulnerability affecting QNAP devices with the Media Streaming add-on. The issue allows remote attackers to run arbitrary commands over the network. Affected installations include QTS 5.0.0 (Media Streaming add-on 500.0.0.3+), QTS 4.5.4 (500.0.0.3+), QTS 4.3.6...

Media Streaming add-on command injection vulnerability

Media Streaming add-on is a media streaming add-on. A command injection vulnerability exists in Media Streaming add-on that can be exploited to run arbitrary commands...

PT-2021-20474

Name of the Vulnerable Software and Affected Versions: Media Streaming add-on versions prior to 500.0.0.3 Media Streaming add-on versions prior to 430.1.8.12 Description: A command injection issue has been reported, allowing remote attackers to run arbitrary commands on QNAP devices running the...