Directory traversal

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...

Default configuration

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

CVE-2016-2205

Symantec Workspace Streaming (SWS) and Workspace Virtualization (SWV) are affected by CVE-2016-2205, a path traversal in the file-download configuration file of the management consoles. An authenticated user could read arbitrary application files on the host via this vulnerability. Affected versi...

CVE-2016-2206

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

CVE-2016-2206

The CVE-2016-2206 entry affects Symantec Workspace Streaming (SWS) and Symantec Workspace Virtualization (SWV). The vulnerability exists in the management consoles where an attacker can read arbitrary host files by altering the file-download configuration file. Affected versions include SWS 7.5.x...

Symantec Workspace Streaming/Workspace Virtualization Path Traversal Vulnerability

Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades.Symantec Workspace Virtualization enables application virtualization, which reduces application conflicts, lowers testing requirements, and reduces support...

Symantec Workspace Streaming/Workspace Virtualization Arbitrary File Read Vulnerability

Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and instant application upgrades.Symantec Workspace Virtualization enables application virtualization, which reduces application conflicts, lowers testing requirements, and reduces support...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Exploit for php platform in category web applications Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Streamo Online Radio And TV Streaming CMS - SQL Injection Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage :...

Streamo Online Radio And TV Streaming CMS - SQL Injection

Application Name : Streamo - Online Radio And Tv Streaming CMS Google Dork : inurl:rjdetails.php?id= Exploit Author : Cyber Warrior | Bug Researchers Group | N4TuraL Author Contact : https://twitter.com/byn4tural Vendor Homepage : http://rexbd.net/ Vulnerable Type : SQL Injection Date : 2016-07-0...

Symantec Workspace Streaming and Workspace Virtualization Path Traversal and Arbitrary File Read

SUMMARY Symantec Workspace Streaming SWS and Workspace Virtualization SWV management consoles were susceptible to a path traversal in a file download configuration file that could allow a malicious user who could access the vulnerable file to view unauthorized application files of specific file...

The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.

A one-unit shift error in the isrtsprequestorreply function in the epan/dissectors/packet-rtsp.c file of the RTSP dissector in Wireshark allows malicious actors operating remotely to trigger a service failure abrupt termination of the application’s operation by using a specially crafted packet th...

RTMPDump librtmp Denial of Service Vulnerability (CNVD-2016-04326)

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. A security vulnerability exists in RTMPDump version 2.4 in librtmp version 1.0 in rtmpsrv. An attacker can explo...

[SECURITY] Fedora 22 Update: libarchive-3.1.2-14.fc22

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

FFmpeg remote file stealing vulnerabilities – moving end of the safety analysis report-vulnerability warning-the black bar safety net

0x1 vulnerability of origin FFmpeg remote file stealing vulnerabilities original source is Foreign vulnerability of the platform,the last year has been in the CTF match is used. Official in January of this year released the fixed version and published the vulnerability number CVE-2 0 1 6-1 8 9...

[SECURITY] Fedora 23 Update: libarchive-3.1.2-15.fc23

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

[SECURITY] Fedora 24 Update: libarchive-3.1.2-17.fc24

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

streaming.cineca.it XSS vulnerability

Vulnerable URL: http://streaming.cineca.it/publish/index.php?evento=Videotutorialirisportalepubblico-101%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS...

CVE-2 0 1 6-1897/8 - FFMpeg vulnerability analysis-vulnerability warning-the black bar safety net

This time there are a lot of vulnerabilities to a sudden outbreak, just like these days of ImageMagick vulnerability swept through the domestic Internet. This a day or two in the black bar safety net@Noxxx first made a two major manufacturers of FFmpeg vulnerabilities, and then also by the other...

[SECURITY] Fedora 24 Update: nodejs-request-2.67.0-6.fc24

Request is designed to be the simplest way possible to make HTTP calls. It supports HTTPS and follows redirects by default. You can stream any response to a file stream. You can also stream a file to a PUT or POST request. It also supports a few simple server and proxy functi ons...