RSI Video Technologies Frontel Information Disclosure Vulnerability

RSI Video Technologies Frontel is a suite of receiver software for monitoring Videofied wireless video alarm systems from the French company RSI Video Technologies. A security vulnerability exists in RSI Video Technologies Frontel that originates when the program sends unencrypted messages and...

How to Auto-BackUp Your WhatsApp Data to Google Drive with Encryption

What if your phone suddenly slips into a bathtub? Maybe you'll end up losing all your important data, more specifically, your WhatsApp photos, videos, Voice Notes and Chat Data that flows through your chats. Sounds scary, isn't it? But, now you need not worry if your phone suddenly died or broke ...

rds.ca XSS vulnerability

Vulnerable URL: http://www.rds.ca/videos/hockey/senateurs-5-canadiens-2-3.1149204?x'...

Mozilla Firefox and Firefox ESR 'nestegg_track_codec_data' heap buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability exists in Mozilla Firefox 'nesteggtrackcodecdata', which allows remote attackers to exploit specially crafted headers in WebM videos to crash an application or execute arbitrary code...

Using AppLock for Android to Hide Apps and Photos? — It's Useless

Widely popular AppLock for Android by DoMobile Ltd. is claimed to be vulnerable to hackers. Having an applock for iPhone or Android device is useful. It is suitable for security and keeping people out of your business. But when it comes to how to password protect apps on Android? How to put...

hgtv.ca XSS vulnerability

Vulnerable URL: http://www.hgtv.ca/videos/?x"prompt/XSSPOSED/...

WordPress Customize Youtube Videos 0.2 Cross Site Scripting Vulnerability

WordPress Customize Youtube Videos plugin version 0.2 suffers from cross site scripting vulnerabilities. Title: WordPress 'Customize Youtube Videos' Plugin Version: 0.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: -...

WordPress Customize Youtube Videos 0.2 Cross Site Scripting

Title: WordPress 'Customize Youtube Videos' Plugin Version: 0.2 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/customize-youtube-videos/ - https://plugins.svn.wordpress.org/customize-youtube-videos/ Notified Vendor/WordPress:...

CVE-2015-4352

Cross-site request forgery CSRF vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors...

Angler Exploit Kit, Bedep Malware Inflating Video Views

A new sort of hacktivism emerged last week when experts from Trustwave published new research revealing that attackers are using the Angler exploit kit and the Bedep Trojan in order to drive artificial views to politically controversial videos. The motivation for the scheme, it appears, is to...

NSA & CIA Analysts Watching Porn, A Lot of Porn, More Than You Could Ever

U.S. National Security Agency NSA is infamous for conducting Global Mass Surveillance to snoop secretly on users' online communications, phone calls, private instant messages, and personal emails, but there is something shocking about it. The Security Agency also asked its employees to watch Porn...

Facebook Messenger Platform Launches at F8 Developer Conference

Yesterday at its annual F8 Developer Conference in San Francisco, Facebook officially turned its Messenger app into a Platform. Facebook's Messenger Platform allows third-party app developers to integrate their apps with Facebook messenger app. However, other popular messaging apps are already...

Vimeo: A user can enhance their videos with paid tracks without buying the track

It is possible to enhance videos with paid tracks without buying the track. Steps to verify: 1. Log into vimeo.com and navigate to https://vimeo.com/enhancer. 2. Click on any paid music track and note down the track id from the URL ex:...

Vimeo: A user can post comments on other user's private videos

It is possible for a user to post comments on other's private videos. Steps to verify: 1. Log into www.vimeo.com as Alice and create a video say, AliceVideo with id - 118026546 with 'Allow anyone to see my videos' setting. 2. Login as Bob and create an album say, BobAlbum with album id 3295969. 3...

SA-CONTRIB-2015-059 - Spider Video Player - Multiple vulnerabilities - Unsupported

Spider Video Player module enables you to add HTML5 and Flash videos to your site. The module doesn't sufficiently check user input when deleting files. A malicious user could delete arbitrary files by making a request to a specially-crafted URL. This vulnerability is mitigated by the fact that t...

Vimeo: CRITICAL vulnerability - Insecure Direct Object Reference - Unauthorized access to `Videos` of Channel whose privacy is set to `Private`.

Hello, This time I found a IDORInsecure Direct Object Reference vulnerability. It allows an attacker to get unauthorized access to Videos of Channel whose privacy is set to Only moderators and people I choose without being a member. In simple words, we can access videos of private channel without...

Vimeo: abusing Thumbnails(https://vimeo.com/upload/select_thumb) to see a private video

https://vimeo.com/upload/selectthumb uri is used set a thumbnails on your vimeo video. https://vimeo.com/upload/selectthumb uri request is compose of 3 parameter clipid, token, and time . clipid parameter is used to select a video you want to get a thumbnail,clipid is a csrf token and time...

Vimeo: Buying ondemand videos that 0.1 and sometimes for free

hello sir this is N B Sri Harsha I Have found an IDOR where we can buy ondemand videos for free but i tested on 0.1$ here is what you should do go any ondemand video like https://vimeo.com/ondemand/snowman click on buy ! start the burp , you wil get an request like this POST...

US Central Command Social Media Accounts Hacked by ISIS Supporters

The official Twitter and YouTube accounts for the US military's Central Command CENTCOM that oversees operations in Central Asia and the Middle East were hacked on Monday by a hacker group claiming association with Islamic State militant group, also known as ISIS. The hacker group, appears to cal...

Videos Tube 2.0 SQL Injection / XSS / Shell Upload

Videos Tube 2.0 / || / / / KnocKout, Septemb0x , BARCOD3 , UnDeRTaKeR / /\ /\ \ \ \ | / \ / Turkey / \ | \ \ / // / \ / / / / Software info |Web App. : Videos Tube |Price : FREE |Version : 2.0, updated the lastest version. |Software: http://www.phpscriptlerim.com/ucretsiz/videos-tube.html...