tudemsas.gov.tr XSS vulnerability

Vulnerable URL: http://www.tudemsas.gov.tr/videoPlayer/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirmOPENBUGBOUNTY;//=blank&.swf Details: Description| Value ---|--- Patched:| No Latest check for...

www1.nyc.gov XSS vulnerability

Vulnerable URL: http://www1.nyc.gov/assets/doh/media/video/hiv/mediaplayer/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| ...

U.S. Dept Of Defense: Video player on ███ allows arbitrary remote videos to be played

Summary: A Flash video player hosted on ███████ can be provided with an arbitrary remote XML file via the url query string parameter. Description: The Flash video player http://█████/shared/widgets/popup.asp uses the url query string parameter as an address to fetch an RSS feed type XML document...

screenrant.com XSS vulnerability

Vulnerable URL: http://screenrant.com/wp-admin/01tempsharefolder/controllers/brightcoveVideoHelper/iframedVideoPlayer.php?videoId=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2787 VIP website status:| Yes...

Unspecified Cross-Site Scripting Vulnerability in TYPO3 HTML5 Video Player Extension

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. An unspecified cross-site scripting vulnerability exists in TYPO3 HTML5 Video Player Extension. Because the program fails to properly filter user-supplied input, an attacker could exploit the...

Cross-Site Scripting in extension "HTML5 Video Player" (html5videoplayer)

It has been discovered that the extension "HTML5 Video Player" html5videoplayer is susceptible to Cross-Site Scripting. Release Date: November 11, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 6.7.0 and below...

QQ Video Player Stack Overflow Vulnerability

QQ Video is the latest local player from Tencent that supports movie and music files in any format. A stack overflow vulnerability exists in qq movie when opening a playlist file. An attacker can exploit the vulnerability to cause an overflow crash...

Tencent Video Memory Corruption Vulnerability

Tencent Video Player is the video player client product of Tencent Video. Tencent Video fails to properly determine the existence of a memory overflow vulnerability in the application when processing qlv media files, allowing attackers to exploit the vulnerability to launch denial of service...

Tencent Video Super Long Character Overflow Vulnerability

Tencent Video Player is the video player client product of Tencent Video. An overflow vulnerability exists in Tencent Video when opening qlv media files by failing to place a length limit on the characters added at the end of the file. An attacker is allowed to exploit this vulnerability to...

WordPress Video Player SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation.WordPress Video Player is a video plugin for WordPress, through which you can easily add videos to your website. WordPress Video Player has multiple SQL injection vulnerabilities. An...

WordPress Spider Video Player Plugin <= 2.1 - Reflected Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "get" parameter. Solution Upgrade the plugin...

WordPress Plugin Video Player 1.5.16 - SQL Injection

WordPress Plugin Video Player 1.5.16 - SQL Injection !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on Contribut...

WordPress Video Player 1.5.16 Plugin - SQL Injection

Exploit for php platform in category web applications !-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on...

WordPress Plugin Video Player 1.5.16 - SQL Injection

!-- Multiple SQL injection vulnerabilities in WordPress Video Player Abstract It was discovered that WordPress Video Player is affected by multiple blind SQL injection vulnerabilities. Using these issues it is possible for a logged on Contributor or higher to extract arbitrary data eg, the...

WordPress Video Player 1.5.16 SQL Injection

------------------------------------------------------------------------ Multiple SQL injection vulnerabilities in WordPress Video Player ------------------------------------------------------------------------ David Vaartjes & Yorick Koster, July 2016...

WordPress Video Player <= 1.5.16 - Multiple Authenticated Blind SQL Injection

The SpiderVPlayer WordPress plugin was affected by a Multiple Authenticated Blind SQL Injection security vulnerability...

Rockstar Games: Reflected XSS in /Videos/ via calling a callback http://www.rockstargames.com/videos/#/?lb=

The researcher found a Reflected XSS vulnerability in our video player service that seemed to be reproducible in multiple areas of the site. In recognition of how widespread the issue was, we opted to award a bonus...

DEBIAN-CVE-2016-5108

Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted QuickTime IMA file...

UBUNTU-CVE-2016-5108

Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted QuickTime IMA file...

sports.ksponco.or.kr XSS vulnerability

Open Bug Bounty ID: OBB-153382 Description| Value ---|--- Affected Website:| sports.ksponco.or.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...