KKCMS backend suffers from sql injection vulnerability

kkcms is an open source video capture and playback system. KKCMS backend suffers from sql injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

KKCMS suffers from SQL injection vulnerability (CNVD-2020-30168)

kkcms is an open source video capture and playback system. KKCMS suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

PT-2020-1243 · Google +5 · Android Kernel +5

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to the uvc scan chain forward function in uvc driver.c, which could lead to linked list corruption due to an unusual root cause. This may result in loca...

Google Android suffers from an unspecified vulnerability (CNVD-2020-03773)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android has security vulnerabilities. An attacker can utilize the vulnerability to perform several activities, including recording videos, taking photos,...

Adobe Prelude CC 2019 Insecure Library Loading (DLL Hijacking) Vulnerability

Adobe Prelude CC 2019 is a video recording and capture tool designed for intuitive and efficient media organizing and metadata entry, quickly tagging and transcoding video footage and creating rough cuts on the fly. An insecure library loading DLL hijacking vulnerability exists in Adobe Prelude C...

Bluetooth Authentication Authorization Bypass Vulnerability in Little Ant Microscan Camera M1

The Ant Microscan Camera M1 is a microscan camera with built-in Bluetooth and wireless capabilities that allow photos to be transferred to a cell phone. A Bluetooth authentication authorization bypass vulnerability exists in the Ant Microsingle Camera M1. An attacker can use this vulnerability to...

Buffer Overflow Vulnerability in Virtual VCR Software

Virtual VCR is a DirectShow video capture application that allows you to capture audio and video to your hard drive in AVI file format. A buffer overflow vulnerability exists in the Virtual VCR software that can be exploited by an attacker to cause a denial of service to the server...

CARBANAK Week Part Four: The CARBANAK Desktop Video Player

Part One, Part Two and Part Three of CARBANAK Week are behind us. In this final blog post, we dive into one of the more interesting tools that is part of the CARBANAK toolset. The CARBANAK authors wrote their own video player and we happened to come across an interesting video capture from CARBAN...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3754-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3754-1 advisory. Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access...

Google Android kernel UVC driver information disclosure vulnerability

Androidon Nexus5X, etc. are the United States Google Google and the Open Handheld Alliance OHA jointly developed a set of running in the Nexus5X smartphone and Linux-based open source operating system. kernel UVC Driver one of the kernel USB Video Capture Driver. An information disclosure...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

KMPlayer 3.9.1.136 - Capture Unicode Buffer Overflow (ASLR Bypass)

!/usr/bin/python KMPlayer 3.9.1.136 Capture Unicode Buffer Overflow ASLR Bypass Author: Naser Farhadi Date: 21 June 2015 Version: 3.9.1.136 Tested on: Windows 7 SP1 32 bit Usage: chmod +x KMPlayer.py python KMPlayer.py Alt+c | Video Capture | Alt+a | Audio Capture paste content of KMPlayer.txt in...

Debian Security Advisory DSA 3238-1 (chromium-browser - security update)

Several vulnerabilities were discovered in the chromium web browser. CVE-2015-1235 A Same Origin Policy bypass issue was discovered in the HTML parser. CVE-2015-1236 Amitay Dobo discovered a Same Origin Policy bypass in the Web Audio API. CVE-2015-1237 Khalil Zhani discovered a use-after-free iss...

Hesperbot - A New Banking Trojan that can create hidden VNC server on infected systems

Security firm ESET has discovered a new and effective banking trojan, targeting online banking users and designed to beat the mobile multi-factor authentication systems. Hesperbot detected as Win32/Spy.Hesperbot is very identical to the infamous Zeus and SpyEye Banking Malwares and infects users ...

CVE-2013-0139

The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service video-capture outage via a packet to UDP port 69...

Arecont Vision model AV1355DN camera vulnerable to denial of service

Overview The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a denial-of-service vulnerability by sending a UDP packet to port 69 on the device. Description The Arecont Vision model AV1355DN MegaDome surveillance camera is reported to be affected by a...

BlackHole RAT : Mac OS X backdoor Trojan !

'BlackHole' is the latest remote administration tool RAT and is available both in Windows and Mac. Hacktool such RAT employs client-server program that communicates to its victim's machine through its trojan server. The server application is installed on the victim while the client application is...

NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...