CVE-2018-7047

CVE-2018-7047 affects Wowza Streaming Engine prior to 4.7.1. The vulnerability is in the MBeans Server where the filesystem can be read and written via JMX using the default JMX credentials, with remote code execution possible. Impact includes potential unauthorized file access and execution of c...

CVE-2018-7048

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7049

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

PT-2018-17866

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions prior to 4.7.1 Description An issue in the MBeans Server allows access to the file system, potentially enabling read and write operations via JMX using default credentials. This could also lead to remote code...

CVE-2018-7047: Use of Hard-coded Credentials

An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file system may be read and written to via JMX using the default JMX credentials remote code execution may be possible as well...

CVE-2018-7048: Uncontrolled Resource Consumption

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service memory consumption via a crafted HTTP request...

CVE-2018-7049: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager causing script injection and/or reflection via a crafted HTTP request...

PT-2018-17868

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions prior to 4.7.1 Description An issue was discovered in the HTTP providers, specifically com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager, causing script injection...

PT-2018-17867

Name of the Vulnerable Software and Affected Versions Wowza Streaming Engine versions prior to 4.7.1 Description A denial of service issue due to memory consumption can be triggered by a crafted HTTP request. Recommendations For versions prior to 4.7.1, update to version 4.7.1 or later to resolve...

streaming-vf.org XSS vulnerability

Open Bug Bounty ID: OBB-570365 Description| Value ---|--- Affected Website:| streaming-vf.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Passing the Online Torch from Rio to PyeongChang

Lighting the Olympic flame marks the beginning of the Olympic Games, commemorating the ancient Greek myth of Prometheus stealing fire from Zeus, and connecting the Games to its predecessors. The lighting ceremony has provided some of the Olympic Games' most iconic moments, such as Muhammad Ali...

[SECURITY] Fedora 27 Update: jackson-databind-2.7.6-8.fc27

General data-binding functionality for Jackson: works on core streaming API...

[SECURITY] Fedora 26 Update: jackson-databind-2.7.6-8.fc26

General data-binding functionality for Jackson: works on core streaming API...

The Future of Endpoint Security is the Cloud, Part 1: Predictive Security

Security Meets Big Data Technology has certainly empowered the adversary, across far more attack surfaces than just endpoints alone. In fact, many other security disciplines have been forced to adapt to increasingly sophisticated attacks — and when they do, they all turn to the same foundation: b...

You are not alone Netflix is down for many and slow for some

By Carolina You are not alone, Netflix is down for many while for some This is a post from HackRead.com Read the original post: You are not alone Netflix is down for many and slow for some...

Logic design flaws in Direct Marketing Mastermind App

The Direct Marketing Everything App is a live streaming platform that focuses on education and training. There is a logic design vulnerability in the Direct Marketing Master App. Attackers can log into other people's accounts and obtain sensitive information by grabbing packets to obtain...

Stripchat bot spells block

Here at Malwarebytes, we spent a lot of time and effort scouring the Internet looking for malicious websites that we can protect our users from. Sometimes, these websites are pushing malware or some kind of scam. Other times it comes down to bad advertising practices that are used to fool the use...

PT-2018-2503 · Live555 +2 · Live555 Rtsp Server Library +2

Name of the Vulnerable Software and Affected Versions: LIVE555 RTSP server library version 0.92 Description: The issue is related to a buffer overflow error in the HTTP packet parser implementation of the LIVE555 RTSP server library. This can be exploited by a remote attacker using a specially...

Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation

Summary Serviio is a free media server. It allows you to stream your media files music, video or images to renderer devices e.g. a TV set, Bluray player, games console or mobile phone on your connected home network. Description The application suffers from an unquoted search path issue impacting...

Serviio PRO 1.8 DLNA Media Streaming Server (mediabrowser) DOM Based XSS

Summary Serviio is a free media server. It allows you to stream your media files music, video or images to renderer devices e.g. a TV set, Bluray player, games console or mobile phone on your connected home network. Description The application is vulnerable to a DOM-based cross-site scripting. Da...