5346 matches found
[SECURITY] Fedora 25 Update: gstreamer-plugins-good-0.10.31-17.fc25
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
hr-online.de XSS vulnerability
Vulnerable URL: http://www.hr-online.de/website/static/streamingpopup/mp3streamer.jsp?client=%3C/style%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Bypass XML Signature Protection Mechanism
Apache Santuario XML Security is vulnerable to bypass attacks. Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows malicious users to remotely bypass the streaming XML signature protection mechanism. It does not affect versions 1.4.x or 1.5.x...
Fun hacks for faster content
A few weeks ago I was at Heathrow airport getting a bit of work done before a flight, and I noticed something odd about the performance of GitHub: It was quicker to open links in a new window than simply click them. Here's a video I took at the time: GitHub link click vs new tab Here I click a...
live.ly - live video streaming - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application live.ly - live video streaming published at the 'play' market has multiple vulnerabilities...
Boot Signal fails while reboot and shutdown signal works properly
The machines created from Streaming VM setup wizard are unable to boot when boot signal is sent from the PVS console. If we send the reboot or shutdown signal it reboots or shuts down the machines...
Anonymous Offline Communications System: PirateBox
Anonymous Offline Communications System PirateBox creates offline wireless networks designed for anonymous file sharing, chatting, message boarding, and media streaming. You can think of it as your very own portable offline Internet in a box! When users join the PirateBox wireless network and ope...
libarchive security update
CentOS Errata and Security Advisory CESA-2016:1850 An update for libarchive is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
Generalized SQL Injection Vulnerability in VOD Live Streaming System of Nanjing Suaxing Information Technology Development Co.
Nanjing Suya Star Information Technology Development Co., Ltd. is for the school distance education and campus entertainment on demand needs and the development of a set of application systems. A generic SQL injection vulnerability exists in the VOD on-demand live streaming system of Nanjing Suya...
CVE-2016-3880
Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow remote attackers to cause a denial of service device hang or reboot via a crafted...
UBUNTU-CVE-2016-3880
Multiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow remote attackers to cause a denial of service device hang or reboot via a crafted...
Wowza Streaming Engine Detection (RTSP)
RTSP based detection of Wowza Streaming Engine. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Intercepting Proxy for Performing Web Application Security Testing: The Pappy Proxy
Intercepting Proxy for Performing Web application security testing The Pappy P roxy A ttack P roxy P rox Y Proxy is an intercepting proxy for performing web application security testing. Its features are often similar, or straight up rippoffs from Burp Suite . However, Burp Suite is neither open...
SQL injection vulnerability in the user_name parameter of Request.aspx page of Nanjing Fargo Streaming Media System.
Nanjing Fargo streaming media system is mainly used for applications such as network TV, live event broadcasting, remote education, enterprise roadshow and multimedia public information service, etc. The system integrates computer, network, audio/video and mobile communication and other related...
How content-length of a HTTP response is handled when rewrite is in use on NetScaler
When using rewrite policy with priority 120 on NetScaler it can be noticed that Content-Length header is misspelled in the response. To alter this behavior we can use another rewrite policywith priority 100 that has an action that can never be true. Note: Priority 120 and 100 is taken as examples...
CVE-2016-1477
Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...
CVE-2016-1477
Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...
Design/Logic Flaw
Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...
CVE-2016-1477
CVE-2016-1477 affects Cisco Connected Streaming Analytics 1.1.1. A vulnerability in the administrative web interface allows remote authenticated users to read pages that include a service password used for event/notification signaling, enabling disclosure of the notification service credentials. ...
