CVE-2019-19455

Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was...

CVE-2019-19453

Affected software: Wowza Streaming Engine (pre-4.8.5). Vulnerability: Cross-site scripting (XSS) where an authenticated user with access to proxy license editing can inject a payload that is executed on the main page of server settings. Root cause / mechanism: Insufficient input validation in the...

CVE-2019-19453

Wowza Streaming Engine before 4.8.5 allows XSS issue 1 of 2. An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5...

PT-2020-10162 · Wowza · Wowza Streaming Engine

Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions prior to 4.8.5 Description: The issue allows an authenticated user with access to proxy license editing to insert a malicious payload that will be triggered in the main page of server settings. This is a case o...

CVE-2019-19453: Improper Neutralization of Input During Web Page Generation

Wowza Streaming Engine before 4.8.5 allows XSS issue 1 of 2. An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5...

PT-2020-10164

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions prior to 4.8.5 Description The issue concerns insecure permissions in the Linux version of the server, potentially allowing a local attacker to escalate privileges by writing arbitrary commands in any file and...

CVE-2019-19455: Incorrect Permission Assignment for Critical Resource

Wowza Streaming Engine before 4.8.5 has Insecure Permissions which may allow a local attacker to escalate privileges in / usr / local / WowzaStreamingEngine / manager / bin / in the Linux version of the server by writing arbitrary commands in any file and execute them as root. This issue was...

The Streaming Wars: A Cybercriminal’s Perspective

Cyberthreats are not relegated to the world of big businesses and large-scale campaigns. The most frequent attacks are not APTs and massive data breaches: they are the daily encounters with malware and spam by common users. And, one of the areas where we are most vulnerable is...

Security Bulletin: OpenSSL vulnerabilites impacting IBM Aspera Streaming for Video 3.8.0 and earlier (CVE-2019-1552)

Summary The OpenSSL vulnerability CVE-2019-1552 impacts IBM Aspera Streaming for Video 3.8.0 and earlier. The fix was first delivered in IBM Aspera Streaming 3.9.6. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL could allow a local attacker to bypass security restrictions, caused...

SQL Injection Vulnerability in sewise Live Streaming Server of Shenzhen Siliconware Technology Co.

Shenzhen Siwei Zhi Technology Co., Ltd. is a national high-tech enterprise focusing on streaming media cloud platform technology research and development. Shenzhen Siliconware Technology Co., Ltd. sewise live server SQL injection vulnerability, attackers can use the vulnerability to obtain databa...

SQL Injection Vulnerability in Streaming Media System Platform of Beijing Century Sunflower Digital Media Technology Co.

Sunflower streaming media service system is a complete set of IP network-based audio and video application platform, she integrated the Century Sunflower video broadcasting system, video-on-demand system, video broadcasting system, as well as data distribution, business management and other...

DEBIAN-CVE-2020-14033

An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusstreamingrtspparsesdp in plugins/janusstreaming.c has a Buffer Overflow via a crafted RTSP server...

PT-2020-13856

Name of the Vulnerable Software and Affected Versions janus-gateway versions through 0.10.0 Description A buffer overflow issue was discovered via a crafted RTSP server, specifically in the janus streaming rtsp parse sdp function within plugins/janus streaming.c. This issue can be exploited by a...

Unauthorized Access Vulnerability in TVHeadend Streaming Server

Tvheadend is a streaming media server software installed under LINUX based systems. An unauthorized access vulnerability exists in the TVHeadend streaming server, which can be exploited by attackers to obtain sensitive information...

Fedora: Security Advisory for libarchive (FEDORA-2020-d8278fe24d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: libarchive-3.4.3-1.fc31

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

streaming-clips.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1177282 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

[SECURITY] Fedora 32 Update: libarchive-3.4.3-1.fc32

Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

SiNVR 3 Video Server Access Disclosure

The vulnerability of the streaming service port 5410/tcp by default of the SiNVR 3 video server is related to weak cryptography for passwords. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

SiNVR 3 Video Server DoS

The vulnerability of the streaming service port 5410/tcp by default of the SiNVR 3 video server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted HTTP requests...