1411 matches found
CVE-2008-4654
CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c 缓冲区溢出 差异...
DLL_Injection_On_VLC
DLL 注入与 CVE-2010-3124 概述 🌱 本项目探讨 DLL（动态链接库）注入这一主题，并特别关注 CVE-2010-3124。 CVE-2010-3124 指的是 VLC Media Player 1.1.3 及更早版本中存在的一个不受信任的搜索路径漏洞。 以下要点可帮助你更好地了解此项目： 漏洞 ：该问题源于一个不安全的搜索路径，该路径被 VLC Media Player 在加载动态链接库（DLL）时使用。 攻击场景 ：攻击者将恶意的特洛伊木马 wintab32.dll 放在 与看似无害的 .mp3 文件相同的文件夹中。 利用 ：当 VLC Media Player 尝试...
CVE-2008-4654
CVE-2008-4654 针对VideoLan的VLC Media Player 0.9.4在处理TiVo文件时出现的栈缓冲区溢出漏洞CVE-2008-4654的功能完整的利用程序。它针对运行在64位Windows系统上的32位二进制文件，并使用WOW64 egghunter来绕过有限的栈空间。 使用方法 更新脚本 ： 将脚本中的占位符 buf = b'...' 替换为你自己的shellcode（例如，来自 msfvenom）。 如果需要不同的标签或自定义egghunter，可酌情调整 EGGHUNTERWOW64 shellcode。 root@kitploit: python...
CVE-2008-4654
CVE-2008-4654 针对漏洞 CVE-2008-4654 VLC Media Player 通过 TiVo Ty 文件扩展名导致的栈缓冲区溢出 的概念验证漏洞利用程序。 使用方法 在与脚本相同的文件夹中放置一个示例 .ty+ 文件并运行脚本。该 ty+ 文件将被修改，以便在使用 VLC Media Player 打开时执行有效载荷。包含有效载荷的文件将被命名为 POCPayload.ty+ 。 root@kitploit: python3 payloadGeneratorCVE-2008-4654.py...
[SECURITY] [DLA 4507-1] vlc security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4507-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 23, 2026 https://wiki.debian.org/LTS -...
CVE-2026-26228 VLC for Android < 3.7.0 Remote Access Path Traversal
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
VideoLAN VLC media player 安全漏洞
VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player and also a multimedia framework developed by the French company VideoLAN. This product supports playback of various media formats such as files and discs as well as different audio and video formats e.g., WMV, MP3,...
VideoLAN VLC media player 安全漏洞
VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It supports playback of various media formats such as files and discs as well as different audio and video formats e.g., WMV, MP3, etc.. Versions of VideoLAN VLC Media Playe...
SUSE CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
UBUNTU-CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
VideoLAN VLC Media Player buffer error vulnerability
VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It is also a multimedia framework. This product supports playback of various media types such as files and discs and various audio/video formats such as WMV and MP3. Version...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2019-18278
When executing VideoLAN VLC media player 3.0.8 with libqt on Windows, Data from a Faulting Address controls Code Flow starting at libqtplugin!vlcentrylicense300f+0x00000000003b9aba. NOTE: the VideoLAN security team indicates that they have not been contacted, and have no way of reproducing this...
[SECURITY] [DSA 6096-1] vlc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6096-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 08, 2026 https://www.debian.org/security/faq -...
KLA90830 DoS vulnerability in VLC media player
Denial of service vulnerability was found in VLC media player. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Security Bulletin VLC 3.0.22 Related products VLC-media-player CVE list CVE-2025-51602 warning Solution Update to the latest version Downlo...
ABB Ability Camera Connect
SUMMARY ABB is aware of public reports of vulnerabilities in a 3rd party component VLC media player Version 2.2.4 which was delivered together with the installation package of Camera Connect Version 1.5.0.14 and below. An update is available that resolves a privately reported outdated 3rd party...
EUVD-2014-9439
Malware in sbrugna...
EUVD-2017-2345
Malware in sbrugna...