CVE-2021-21286

AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All queries now remove the...

Information Leakage Vulnerabilities in the Unified Audio/Video Platform of Beijing Huayu Information Technology Co.

Ltd. is a company that specializes in software and information services. An information leakage vulnerability exists in the unified audio and video platform of Beijing Huayu Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

PlayTube Path Traversal Vulnerability

PlayTube is a PHP-based video sharing platform. A security vulnerability exists in PlayTube version 1.8. An attacker can exploit the vulnerability to obtain user details...

Tencent Weishi app suffers from unauthorized access vulnerability

Tencent Weishi is a short video creation and sharing platform of China's Tencent tencent. Users can browse, create and share all kinds of short videos on Weishi, as well as share videos on Weishi to friends and social platforms. An unauthorized access vulnerability exists in the Tencent Weishi ap...

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

AVideo Platform 8.1 - Cross Site Request Forgery Password Reset Exploit Title: AVideo Platform 8.1 - Cross Site Request Forgery Password Reset Dork: N/A Date: 2020-02-05 Exploit Author: Ihsan Sencan Vendor Homepage: https://avideo.com Software Link: https://github.com/WWBN/AVideo Version: 8.1...

Universal password login vulnerability in Suzhou Kodak's security monitoring video platform.

MSS Streaming Media Server is a surveillance video streaming platform from Suzhou Kodak Technology Co. A universal password login vulnerability exists in the Suzhou KODAK Security Surveillance Video Platform. An attacker can utilize the vulnerability to log in to the backend, view all video files...

joyplus-cms cross-site scripting vulnerability (CNVD-2018-08698)

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A cross-site scripting vulnerability exists in...

Kaltura 13.1.0 Code Execution / Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Advisory: Kaltura - Remote Code Execution and Cross-Site Scripting Release Date: 2017/09/12 Author: Robin Verton email protected CVE: CVE-2017-14141, CVE-2017-14142, CVE-2017-14143 Application: Kaltura = 13.1.0 Risk: Critical Vendor Status:...

Huawei VCM5010 Arbitrary File Upload Vulnerability

VCM5010 is a video content management platform from China's Huawei Huawei, an all-in-one video big data analysis device. The Huawei VCM5010 suffers from an arbitrary file upload vulnerability, which can be exploited by an attacker to upload arbitrary files because the uploaded files are not...

Kaltura Video Platform Detection (HTTP)

HTTP based detection of the Kaltura Video Platform. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Full-disclosure] CVE-2007-3694: Cross site scripting (XSS) in broadcast machine

Source: http://int21.de/cve/CVE-2007-3694-bm.html Cross site scripting XSS in broadcast machine References http://www.getmiro.com/create/broadcast/ https://vulners.com/cve/CVE-2007-3694 Description Cross site scripting describes attacks that allow to insert malicious html or javascript code via g...