45 matches found
CVE-2024-27488
Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter method to authenticate the http restful ap...
CVE-2024-27488
ZLMediaKit versions 1.0–8.0 are affected by an Incorrect Access Control vulnerability that enables remote attackers to escalate privileges and obtain sensitive information. The issue stems from the application enabling the HTTP API interface by default and using a secret parameter for authenticat...
CVE-2024-27488
Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter method to authenticate the http restful ap...
ZLMediaKit 安全漏洞
ZLMediaKit is an advanced C++ 11-based operational-grade streaming media service framework open-sourced by ZLMediaKit in China. A security vulnerability exists in ZLMediaKit versions 1.0 through 8.0, which stems from the presence of an incorrect access control vulnerability that allows a remote...
PT-2024-21918 · Unknown · Zlmediakit
Name of the Vulnerable Software and Affected Versions: ZLMediaKit versions 1.0 through 8.0 Description: The issue allows remote attackers to escalate privileges and obtain sensitive information due to an Incorrect Access Control vulnerability. The application system enables the http API interface...
CVE-2023-39067
Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL...
CVE-2023-39067
Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL...
PT-2023-26770 · Unknown · Zlmediakit
Name of the Vulnerable Software and Affected Versions: ZLMediaKiet versions 4.0 through 5.0 Description: The issue allows an attacker to execute arbitrary code via a crafted script to the URL, potentially leading to the execution of malicious scripts. This is a Cross Site Scripting vulnerability...
CVE-2023-31861
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
CVE-2023-31861
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
CVE-2023-31861
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
Directory traversal
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
CVE-2023-31861
CVE-2023-31861 affects ZLMediaKit 4.0 and is a Directory Traversal vulnerability. The root cause is a path traversal flaw in ZLMediaKit 4.0, exposing potential confidentiality impact (CVE metrics show HIGH). Exploitation details are not provided in the documents. There is no publicly documented r...
PT-2023-23495 · Unknown · Zlmediakit
Name of the Vulnerable Software and Affected Versions: ZLMediaKit version 4.0 Description: The issue allows for Directory Traversal. Recommendations: For ZLMediaKit version 4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...
ZLMediaKit 路径遍历漏洞
ZLMediaKit is China ZLMediaKit open source an advanced operational-grade streaming media service framework based on C++11. A security vulnerability exists in ZLMediaKit version 4.0, which stems from vulnerability to directory traversal attacks...
CVE-2023-31861
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
CVE-2023-31861
ZLMediaKit 4.0 is vulnerable to Directory Traversal...
CVE-2022-37237
An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327...