CVE-2014-5956

CVE-2014-5956 affects the Android app “VPlayer Video Player” (aka me.abitno.vplayer.t), version 3.2.6. The root cause is that the app does not verify X.509 certificates from SSL servers, which can allow a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted c...

CVE-2014-5956

The VPlayer Video Player aka me.abitno.vplayer.t application 3.2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Joomla! Spider Video Player Component <= 2.8.3 SQLi Vulnerability - Active Check

Joomla! Spider video player Component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! Component spidervideoplayer - theme SQL Injection

Joomla! Component spidervideoplayer - theme SQL Injection source: https://www.securityfocus.com/bid/69422/info Spider Video Player extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An...

Joomla! Component spidervideoplayer - 'theme' SQL Injection

source: https://www.securityfocus.com/bid/69422/info Spider Video Player extension for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker may leverage this issue to compromise the application...

Air Transfer Iphone 1.3.9 Multiple Vulnerabilities

Air Transfer Iphone version 1.3.9 suffers from remote denial of service and unauthenticated file access vulnerabilities. Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Air Transfer Iphone 1.3.9 - Multiple Vulnerabilities

Exploit Title: Air Transfer Iphone v1.3.9 -Remote crash, Broken Authentication file download and Memo Access. Date: 08/23/2014 Author: Samandeep Singh SaMaN - @samanL33T Vendor Homepage:http://www.darinsoft.co.kr/subhtmls/airtransferguide.html...

Stream Video Player <= 1.4.0 - Setting Manipulation CSRF

The Stream Video Player WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

ZooEffect 1.08 - HTTP Referer Reflected XSS

Description The ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 WordPress plugin was affected by a HTTP Referer Reflected XSS security vulnerability...

WordPress HTML5 Video Player with Playlist plugin Multiple XSS Vulnerabilities

WordPress HTML5 Video Player with Playlist Plugin is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2014-4534

Multiple cross-site scripting XSS vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 theme or 2 playlistmod parameter...

CVE-2014-4534

The CVE-2014-4534 entry covers multiple XSS vulnerabilities in the WordPress plugin “HTML5 Video Player with Playlist” (versions up to and including 2.4.0). Vulnerable component: videoplayer/autoplay.php; attacker can inject arbitrary script/HTML via the (1) theme or (2) playlistmod parameter. Im...

CVE-2014-4534

Multiple cross-site scripting XSS vulnerabilities in videoplayer/autoplay.php in the HTML5 Video Player with Playlist plugin 2.4.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 theme or 2 playlistmod parameter...

SPlayer <= 3.7 (build 2055) Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Exploit Title: SPlayer = 3.7 build 2055 Buffer Overflow Exploit Date: May 04, 2011 Author: xsploitedsec xsploitedsecurity at gmail dot com Software Link: http://www.splayer.org/index.en.html Versions: = 3.7 build 2055 Tested On: WinXP SP3 Eng /...

Total Video Player 1.31 .m3u Crash PoC

No description provided by source. Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP S...

E.M. Total Video Player 1.31 - (.wav) Local Crash Exploit

No description provided by source. !/usr/bin/perl E.M. Total Video Player V1.31 .wav Local Crash Exploit Author : v3n0m Site : http://yogyacarderlink.web.id/ group : YOGYACARDERLINK Date : February, 22-2010 INDONESIA Software : E.M. Total Video Player Version : 1.31 Other versions may also be...

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software...

X (Formerly Twitter): XSS vulnerability in video player page

Hello, I found a XSS vulnerability in your site. Try this:...

WordPress Plugin HDW Player - wp-adminadmin.php SQL Injection

WordPress Plugin HDW Player - wp-adminadmin.php SQL Injection source: https://www.securityfocus.com/bid/69105/info The WordPress HDW Player plugin Video Player & Video Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it i...