CVE-2018-5133

If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be executed if a user loads "chrome://browser/content/preferences/in-content/preferences.xul" directly in a tab and executes a search. This...

Look at the video and audio de-zero loophole

Look Video is an online video player. A de-zero vulnerability exists in the handling of certain mov format files, which can be exploited by attackers to cause a denial of service attack...

Take a look at the Denial of Service Vulnerability in Video Player

Look Video is an online video player. Look Video generates a breakpoint exception when processing certain avi files, which can be exploited to cause a denial of service attack...

Video Player All Format - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Video Player All Format published at the 'play' market has multiple vulnerabilities...

surfline.com XSS vulnerability

Open Bug Bounty ID: OBB-462824 Description| Value ---|--- Affected Website:| surfline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Memory Corruption Vulnerability in AVI Video Processing by AVI Star

Video Star is a video player. A memory corruption vulnerability exists in the AVI video processing of the AVI Star player. An attacker can cause the program to crash by constructing a malformed AVI video, which if successfully exploited can lead to arbitrary code execution...

WordPress Secure HTML5 Video Player 3.14 Cross Site Scripting Vulnerability

WordPress Secure HTML5 Video Player plugin version 3.14 suffers from a cross site scripting vulnerability. Vulnerable Secure HTML5 Video Player Plugin 3.14 Secure HTML5 Video Player Plugin is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize...

Memory Corruption Vulnerability in Storm Video 5 PC Client (CNVD-2017-35532)

Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists when opening certain MOV files in the Storm Video player, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video Player when parsing certain format webm files, which can be exploited by attackers to cause a denial of service attack...

Sohu Video 5 PC Client Has Denial of Service Vulnerability

Sohu Video 5 is a video player from Sohu. A denial of service vulnerability exists in Sohu Video Player when parsing certain 3gp files, which can be exploited by attackers to cause a denial of service attack...

Memory Corruption Vulnerability in Sohu Video 5

Sohu Video 5 is a video player from Sohu. A memory corruption vulnerability exists in the Sohu Video 5 PC client when opening certain mov files, which can be exploited by an attacker to cause a denial of service...

alberto-pants.com XSS vulnerability

Vulnerable URL: https://www.alberto-pants.com/video/player/player.php?src=xss%22%3E%3Csvg/onload=prompt%27openbugbounty%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1617371...

Null Pointer Reference Vulnerability in PPLive

PPLive is an online video player developed and operated by Shanghai Poly Media Technology Co. A null pointer reference vulnerability exists when PPLive plays or opens a specific mkv file online, which can be exploited by an attacker to conduct a denial of service attack...

Memory Corruption Vulnerability in Shooter Player dh264 Module

Shooter Video Player is an open source player project created and maintained by Shooter.com. Kernel based on MPC, MPC-HC and ffmpeg. A memory corruption vulnerability exists in the dh264 module of Shooter Video Player, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in Sohu Video Player mp4splitter Module

Sohu Video 5 is a video player from Sohu. Sohu Video Player suffers from a memory corruption vulnerability in the mp4splitter module when opening certain MP4 files, which can be exploited by an attacker to cause a denial of service...

icestories.exploratorium.edu XSS vulnerability

Vulnerable URL: http://icestories.exploratorium.edu/dispatches/wp-content/plugins/flash-video-player/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description...

UBUNTU-CVE-2017-8312

Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file...

VLC Media Player 2.2.3 DecodeAdpcmImaQ Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: VLC Media Player 2.2.3- 'DecodeAdpcmImaQT' Buffer Overflow Author: Sultan albalawi st:http://mirror.library.ucy.ac.cy/videolan/vlc/2.2.3/win32/vlc-2.2.3-win32.exe Tested on:win10...

March 20, 2017—KB4015438 (OS Build 14393.969)

None None...

Total Video Player SEH Buffer Overflow

A buffer overflow vulnerability exists in Total Video Player. The vulnerability is due to improper parsing of parameters in the Settings.ini. A remote attacker could exploit this vulnerability by enticing a user to open a malformed Settings.ini file...