Information disclosure

The ZOOM Cloud Meetings aka us.zoom.videomeetings application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5811

The ZOOM Cloud Meetings aka us.zoom.videomeetings application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5811

The CVE-2014-5811 entry concerns the ZOOM Cloud Meetings Android app (package us.zoom.videomeetings) version identified as @7F060008, which does not verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via ...

XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress

Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

WordPress DZS Video Gallery XSS / Path Disclosure / Command Execution

Hello list! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

Zoom Player Pro 3.30 (.m3u) - File Buffer Overflow Exploit (seh)

No description provided by source. ?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original...

Zoom VoIP Phone Adapater ATA1+1 1.2.5 - CSRF Exploit

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action=http://10.1.1.165/callwzd.html method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...

Zoom X4/X5 ADSL Modem - Multiple Vulnerabilities

No description provided by source. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar...

Zoom Media Gallery 2.1.2 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC

No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...

Inmatrix Ltd. Zoom Player 8.5 - (.jpeg) Exploit

No description provided by source. Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ Software Link:...

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array ReadMakernoteTag = array , getMakernoteTextValue = array , InterpretMakernotetoHTML = array ; // Include th...

Zoom Player 3.30/5/6 Crafted ZPL File Error Message Arbitrary Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application or to crash the application...

WrenSoft Zoom Search Engine 2.0 Build: 1018 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8823/info WrenSoft Zoom Search Engine is prone to a cross-site scripting issue in the software's search module. A remote attacker may be able to execute HTML or script code in a user's browser. The problem occurs because...

Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities

No description provided by source. Five models of the Zoom Telephonics ADSL Modem/Router line suffer from multiple critical vulnerabilities, almost all being of a remote access attack vector. Models affected: Zoom X3 ADSL Modem/Router Zoom X4 ADSL Modem/Router Zoom X5 ADSL Modem/Router Zoom ADSL...

Uzbey: SQL injection, time zoom script, tile ID

The tile ID parameter to the tile zoom script is vulnerable to SQL injection. The following will cause the script to run a benchmark, returning an error 8-10 seconds later: https://staging.uzbey.com/zoom-image/BENCHMARK10000000,SHA11...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to 1 preview.swf, 2 previewskinrouge.swf, 3 previewallchars.swf, or 4 previewskinoverlay.swf...

WordPress DZS Video Gallery Cross Site Scripting / Content Spoofing

Hello list! There are Content Spoofing and Cross-Site Scripting vulnerabilities in plugin DZS Video Gallery for WordPress. After I announced multiple vulnerabilities in DZS Video Gallery at 08.05.2014 and informed developers, they ignored it, so the second advisory is going directly to full...

CVE-2013-3260

Heap-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file...

CVE-2013-3259

Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file...