WWBN AVideo 安全漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6, which originates from an information disclosure vulnerability in the aVideoEncoderReceiveImage function. An attacker can exploit this vulnerability to read arbitra...

WWBN AVideo 跨站请求伪造漏洞

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A cross-site request forgery vulnerability exists in WWBN AVideo version 11.6. An attacker exploits the vulnerability to escalate privileges via a specially crafted HTTP request...

WWBN AVideo输入验证错误漏洞

Wwbn Avideo is a video platform builder written in PHP by the team at WWbn WWBN. A security vulnerability in objects/login.json.php in WWBN AVideo through 11.6 allows attackers to redirect arbitrary users from a crafted url to the login page...

Wwbn Avideo 跨站脚本漏洞

Wwbn Avideo is a video platform builder written in PHP by the Wwbn WWBN team. A security vulnerability exists in objects/function.php in the function getDeviceID in Wwbn Avideo before 11.6, which allows an attacker to view /include/head.php with the yptDevice parameter...

Card skimmers strike Sotheby’s in Brightcove supply chain attack

Over 100 real estate websites have been compromised by the same web skimmer in a supply chain attack. So what happened? On Monday, January 3, Palo Alto said it had found a supply chain attack that used a cloud video platform to distribute skimmer campaigns. The attacker injected the skimmer’s...

Cloud video platform abused in web skimmer attack against real estate sites

By Deeba Ahmed New Web Skimmer Campaign Exploiting Cloud Video Distribution Supply Chain to Target Real Estate Sites. This is a post from HackRead.com Read the original post: Cloud video platform abused in web skimmer attack against real estate sites...

PlayTube 代码问题漏洞

PlayTube is a PHP-based video sharing platform. A code issue vulnerability exists in PlayTube, which stems from an error in the purchase in the product config.php file. The vulnerability can be exploited to execute arbitrary code...

AVideo 和 YouPHPTube 跨站脚本漏洞

YouPHPTube is a PHP-based video website system. wwbn Avideo is a video platform builder written in PHP by the team at WWbn WWBN. AVideo and YouPHPTube suffer from a cross-site scripting vulnerability that could be exploited by a remote attacker to steal an administrator's session cookie or perfor...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting XSS vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects:...

CVE-2021-21738

The CVE-2021-21738 entry affects ZTE ZXIPTV/EAS_P v5.06.04.09 (ZXIPTV EAS_P platform). Root cause: insufficient input validation and filtering allows reflective cross-site scripting (XSS) via tampered parameters. Impact: could lead to execution of client-side code in the context of authenticated ...

Weak password vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is a software company specializing in the research, development and service of video IoT technology. A weak password vulnerability exists in the H5S video platform of ZeroVision Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain...

Information leakage vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology is serving customers with video technology and is committed to IoT video development simplicity. There is an information leakage vulnerability in the H5S video platform of ZeroVision Technology Shanghai Co. that can be exploited by attackers to obtain sensitive information...

Tencent video windows client has denial of service vulnerability

Tencent Video, launched in April 2011, is an online video platform with popular content and professional media operation capabilities. It is a comprehensive video content platform that aggregates hot movies and TV shows, variety shows and entertainment, sports events, news and information, etc.,...

CVE-2021-21286

AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All queries now remove the...

Information Leakage Vulnerabilities in the Unified Audio/Video Platform of Beijing Huayu Information Technology Co.

Ltd. is a company that specializes in software and information services. An information leakage vulnerability exists in the unified audio and video platform of Beijing Huayu Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

PlayTube Path Traversal Vulnerability

PlayTube is a PHP-based video sharing platform. A security vulnerability exists in PlayTube version 1.8. An attacker can exploit the vulnerability to obtain user details...

Tencent Weishi app suffers from unauthorized access vulnerability

Tencent Weishi is a short video creation and sharing platform of China's Tencent tencent. Users can browse, create and share all kinds of short videos on Weishi, as well as share videos on Weishi to friends and social platforms. An unauthorized access vulnerability exists in the Tencent Weishi ap...

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

AVideo Platform 8.1 - Cross Site Request Forgery Password Reset Exploit Title: AVideo Platform 8.1 - Cross Site Request Forgery Password Reset Dork: N/A Date: 2020-02-05 Exploit Author: Ihsan Sencan Vendor Homepage: https://avideo.com Software Link: https://github.com/WWBN/AVideo Version: 8.1...