WordPress Spider Video Player 2.1 SQL Injection

Exploit Title : Wordpress Spider Video Player plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Plugin Link : http://web-dorado.com/ Home : www.ashiyane.org Security Risk : High Version : 2.1 Dork : inurl:wp-content/plugins/player/settings.php?playlist= Tested on: Linux...

WordPress Spider Video Player Plugin - SQL Injection

This WordPress Spider Video Player plugin's "theme" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Spider Video Player - 'theme' SQL Injection

source: https://www.securityfocus.com/bid/59021/info Spider Video Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WordPress Stream Video Player Plugin <= 1.4.0 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. Solution Update the plugin...

CorePlayer flash video player crossite scripting

Crossite scripting via callback parameter...

Total Video Player V1.31 m3u playlist exploit

Exploit for windows platform in category local exploits / 28-08-2012 Total Video Player V1.31 m3u playlist exploit Local Exploit Written by GoTr00t Tested on Windows 7 aksuumitathotmail.com / include include include int main char exploit3000; memsetexploit,0x00,sizeofexploit; char overflow304;...

Total Video Player 1.31 - .m3u Crash (PoC)

Total Video Player 1.31 - .m3u Crash PoC Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Window...

Total Video Player 1.31 .m3u Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested...

Total Video Player 1.31 Proof Of Concept

------------------------------------------------------------------ Title: Total Video Player Crash Poc Date: June 17 2012 Author: 0dem Software Link: http://totalvideoplayer.en.softonic.com/ Version: 1.31 Tested on: Win XP Sp3 Description: Player will hang, when trying to open malformed .m3u file...

Total Video Player 1.31 - '.m3u' Crash (PoC)

Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP SP 3 Description: Total Video Player...

Total Video Player V1.31 Memmory Corruption

Exploit for windows platform in category local exploits / Title : Total Video Player V1.31 Memmory Corruption Author : Ayrbyte link : http://www.softpedia.com/get/Multimedia/Video/Video-Players/Total-Video-Player.shtml tested on : windows 7 fb : fb.me/Ayrbyte greetz to : Zax Oktav, Andy Oioi,...

Total Video Player V1.31 [.flv] vuln after exception handling

Exploit for windows platform in category local exploits / title : Total Video Player V1.31 .flv vuln after exception handling author : Ayrbyte link : http://www.softpedia.com/get/Multimedia/Video/Video-Players/Total-Video-Player.shtml tested on : windows 7 fb : fb.me/Ayrbyte greetz to : thank's t...

[SignalSEC Labs]: HTC Touch2 T3333 Video Player Memory Corruption

Affected Software: HTCVideoPlayer.exe Tested on: HTC Touch2 T3333 - Windows Mobile 6.5 Vulnerability: Memory Corruption Details: HTCVideoPlayer is the default media player of HTC Windows Mobile devices. This media player is prone to a memory corruption vulnerability while parsing stbl atom of 3g2...

[SECURITY] Fedora 16 Update: kdemultimedia-4.7.1-4.fc16

The kdemultimedia package contains multimedia applications, including: dragonplayer video player juk music player kmix audio mixer kscd audio cd player...

DEBIAN-CVE-2011-1684

Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...

[SECURITY] Fedora 14 Update: kdemultimedia-4.6.2-1.fc14

The kdemultimedia package contains multimedia applications, including: dragonplayer a simple video player juk a music manager and player kmix an audio mixer kscd an Audio-CD player...

[SECURITY] Fedora 15 Update: kdemultimedia-4.6.2-1.fc15

The kdemultimedia package contains multimedia applications, including: dragonplayer a simple video player juk a music manager and player kmix an audio mixer kscd an Audio-CD player...

Design/Logic Flaw

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."...

Total Video Player 1.31 DLL Hijacking

=================================================== Total Video Player V 1.31 DLL Hijacking Exploit =================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

Total Video Player V 1.31 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Total Video Player V 1.31 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ ...