CVE-2008-4654

CVE-2008-4654 Débordement de tampon dans VideoLAN VLC media player 0.9.4 Media Player ty.c Diff...

DLL_Injection_On_VLC

DLL-инъекция и CVE-2010-3124 Обзор 🌱 Этот проект исследует тему DLL-инъекции Dynamic Link Library и конкретно фокусируется на CVE-2010-3124. CVE-2010-3124 относится к уязвимости недоверенного пути поиска, обнаруженной в VLC Media Player версии 1.1.3 и ранее. Вот ключевые моменты, которые помогут...

VLC_CVE-2021-25801_Analysis

Analyse de CVE-2021-25801 La vulnérabilité provient d'un défaut de vérification approfondie du type de chunk passé à Parseindx lors de la tentative de lecture d'un sous-chunk indx, pointé par un chunk super indx valide. root@kitploit: else if pindx-iindextype == AVIINDEXOFINDEXES //this is the...

VLC-CVE-2008-4654-Exploit

VLC-CVE-2008-4654-Exploit Eh bien, c'est juste une vieille vulnérabilité dont le numéro CVE est CVE-2008-4654. Cette vulnérabilité est causée par un manque de mémoire à la ligne 1650 de modules/demux/ty.c. root@kitploit: streamReadpdemux-s, mstbuf, 8 + imapsize; Quand j'ai téléchargé l'EXP depuis...

CVE-2008-4654

CVE-2008-4654 VideoLan の VLC Media Player 0.9.4 が TiVo ファイルを処理する際のスタックベースのバッファオーバーフロー脆弱性 CVE-2008-4654 に対する完全な機能するエクスプロイトです。64 ビット Windows システム上で動作する 32 ビットバイナリを対象としており、WOW64 エッグハンターを使用して限られたスタック領域をバイパスします。 使用方法 スクリプトの更新 : スクリプト内のプレースホルダー buf = b'...' を自身のシェルコード（例：msfvenom で生成）に置き換えてください。...

VLC_CVE-2021-25804_Analysis

Un fichier AVI peut contenir plusieurs pistes. Par exemple, une piste audio et une piste vidéo. Afin d’analyser un nombre arbitraire de pistes, VLC doit d’abord déterminer si une piste donnée est terminée et jouable. Deux variables sont définies dans ce but, toutes deux nommées itrack. La variabl...

CVE-2008-4654

CVE-2008-4654 Exploit PoC pour la vulnérabilité CVE-2008-4654 VLC Media Player, débordement de tampon basé sur la pile via l'extension de fichier TiVo Ty. Utilisation Exécutez le script avec un fichier .ty+ d'exemple dans le même dossier que le script. Le fichier ty+ sera modifié pour exécuter la...

Astra Linux – Vulnerability in vlc

Videolan VLC prior to version 3.0.20 contains an incorrect offset read, which leads to a Heap-Based Buffer Overflow in the GetPacket function and results in memory corruption...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

EUVD-2026-30950

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

zenshin 安全漏洞

Zenshin is an animation list management and media streaming tool developed by Hitarth. Versions of Zenshin prior to 2.7.0 contained security vulnerabilities. These vulnerabilities stemmed from OS command injection in the /stream-to-vlc Express route, which could allow remote attackers to execute...

PT-2026-41946

Name of the Vulnerable Software and Affected Versions hitarth-gg Zenshin versions prior to 2.7.0 Description An OS command injection flaw exists in the '/stream-to-vlc' Express route. This allows remote attackers to execute arbitrary commands on the host operating system by manipulating the url...

CVE-2026-37281

CVE-2026-37281 affects hitarth-gg Zenshin before 2.7.0. An OS command injection exists in the /stream-to-vlc Express route, allowing remote execution via the url parameter. Impact is critical (CVSS 3.1: 9.8). Remediation: upgrade to version 2.7.0 or later. Exploitation status is not provided in t...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

CVE-2026-37281

An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to execute arbitrary commands via the url parameter...

Fedora 45 : live555 / vlc (2026-56c8fe41c8)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-56c8fe41c8 advisory. Latest upstream release. Adds protection against the use of a 'stolen' authenticated RTSP session id to send RTSP server's PLAY, PAUSE, TEARDOWN, and...

Debian: Security Advisory (DLA-4507-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...