WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in World Wide Broadcast Network AVideo WWBN AVideo versions prior to 12.4. An attacker can exploit this vulnerability to obtain sensitive information via the /user success parameter...

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels

In yet another sign that Telegram is increasingly becoming a thriving hub for cybercrime, researchers have found that threat actors are using the messaging platform to peddle phishing kits and help set up phishing campaigns. "To promote their 'goods,' phishers create Telegram channels through whi...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6, which stems from an information disclosure vulnerability in the chunkFile function. An attacker can exploit this vulnerability to cause an arbitrary file to be rea...

Directory Traversal Vulnerability in H5S Video Platform of ZeroVision Technology (Shanghai) Co.

H5S Video Platform is a video management platform that supports Windows LinuxCentOS ubuntu. A directory traversal vulnerability exists in the H5S Video Platform of ZeroVision Technologies Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information...

WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A cross-site scripting vulnerability exists in WWBN AVideo version 11.6. An attacker can exploit this vulnerability to execute arbitrary Javascript via a specially crafted HTTP request...

WWBN AVideo 跨站脚本漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A cross-site scripting vulnerability exists in WWBN AVideo version 11.6. An attacker can exploit this vulnerability to execute arbitrary Javascript via a specially crafted HTTP request...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6. An attacker exploits the vulnerability to access and take over resources via specially crafted HTTP requests...

WWBN AVideo 跨站请求伪造漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A cross-site request forgery vulnerability exists in WWBN AVideo version 11.6. An attacker exploits the vulnerability to escalate privileges via a specially crafted HTTP request...

WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6, which originates from an information disclosure vulnerability in the aVideoEncoderReceiveImage function. An attacker can exploit this vulnerability to read arbitra...

Wwbn Avideo 跨站脚本漏洞

Wwbn Avideo is a video platform builder written in PHP by the Wwbn WWBN team. A security vulnerability exists in objects/function.php in the function getDeviceID in Wwbn Avideo before 11.6, which allows an attacker to view /include/head.php with the yptDevice parameter...

WWBN AVideo输入验证错误漏洞

Wwbn Avideo is a video platform builder written in PHP by the team at WWbn WWBN. A security vulnerability in objects/login.json.php in WWBN AVideo through 11.6 allows attackers to redirect arbitrary users from a crafted url to the login page...

Card skimmers strike Sotheby’s in Brightcove supply chain attack

Over 100 real estate websites have been compromised by the same web skimmer in a supply chain attack. So what happened? On Monday, January 3, Palo Alto said it had found a supply chain attack that used a cloud video platform to distribute skimmer campaigns. The attacker injected the skimmer’s...

Cloud video platform abused in web skimmer attack against real estate sites

By Deeba Ahmed New Web Skimmer Campaign Exploiting Cloud Video Distribution Supply Chain to Target Real Estate Sites. This is a post from HackRead.com Read the original post: Cloud video platform abused in web skimmer attack against real estate sites...

PlayTube 代码问题漏洞

PlayTube is a PHP-based video sharing platform. A code issue vulnerability exists in PlayTube, which stems from an error in the purchase in the product config.php file. The vulnerability can be exploited to execute arbitrary code...

AVideo 和 YouPHPTube 跨站脚本漏洞

YouPHPTube is a PHP-based video website system. wwbn Avideo is a video platform builder written in PHP by the team at WWbn WWBN. AVideo and YouPHPTube suffer from a cross-site scripting vulnerability that could be exploited by a remote attacker to steal an administrator's session cookie or perfor...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

The CVE-2021-21738 entry affects ZTE ZXIPTV/EAS_P v5.06.04.09 (ZXIPTV EAS_P platform). Root cause: insufficient input validation and filtering allows reflective cross-site scripting (XSS) via tampered parameters. Impact: could lead to execution of client-side code in the context of authenticated ...

Weak password vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is a software company specializing in the research, development and service of video IoT technology. A weak password vulnerability exists in the H5S video platform of ZeroVision Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain...