MKV Amp Player (MP4, DVD) - BSD license, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application MKV Amp Player MP4, DVD published at the 'play' market has multiple vulnerabilities...

dvd-subtitles.com XSS vulnerability

Vulnerable URL: http://dvd-subtitles.com/search.html?filmname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 747215 Google Pagerank| 4...

bernies-dvd-shop.com XSS vulnerability

Vulnerable URL: http://www.bernies-dvd-shop.com/shop/basketnew.php?pagefile=" Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 16:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4304396 Google Pagerank| 0 VI...

dvd-access.com Open Redirect vulnerability

Vulnerable URL: http://www.dvd-access.com/matome/r.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1780208 Google Pagerank| 3 VIP website...

Updated qemu packages fix security vulnerabilities

Updated qemu packages fix security vulnerabilities: Qemu emulator built with the RTL8139 emulation support is vulnerable to an information leakage flaw. It could occur while processing network packets under RTL8139 controller's C+ mode of operation. A guest user could use this flaw to read...

CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x is affected by an authentication issue due to default or hard-coded credentials across multiple components (including Image Vault 3.x itself and related GE products such as GEMNet License Server). The ICS-CERT advisory (and GE’s self-assessment) confirms r...

CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...

DVDVideoTool 1 Click Extract Audio ActiveX Control Buffer Overflow Vulnerability

DVDVideoTool 1 Click Extract Audio is a free audio extraction software package from DVDVideoTool.com. A buffer overflow vulnerability exists in DVDVideoTool 1 Click Extract Audio. The vulnerability is due to the program failing to perform proper boundary checking on user-submitted input. An...

Brasero-CDDVD-Burner-3.4.1

Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop Homepage:https://wiki.gnome.org/Apps/Brasero Tested on: Kali Linux 1.0.9...

Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash (PoC)

Brasero CDDVD Burner 3.4.1 - .m3u Buffer Overflow Crash PoC !/usr/bin/python Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop...

Brasero CD/DVD Burner 3.4.1 - '.m3u' Buffer Overflow Crash (PoC)

!/usr/bin/python Exploit title: Brasero 3.4.1 'm3u' Buffer Overflow POC Date Discovered: 15th March' 2015 Exploit Author: Avinash Kumar Thapa "-Acid" Vulnerable Software: Brasero 3.4.1 CD/DVD for the Gnome Desktop Homepage:https://wiki.gnome.org/Apps/Brasero Tested on: Kali Linux 1.0.9 buffer...

openSUSE Security Update : vlc (openSUSE-SU-2015:0201-1)

vlc was updated to the current openSUSE Tumbleweed version. live555 was also updated to the current openSUSE Tumbleweed version as a dependency. Security issues fixed : - Fix various buffer overflows and null ptr dereferencing boo914268, CVE-2014-9625. Other fixes : - Enable SSE2 instruction set...

Honestech-VHS-to-DVD

Exploit Title: Honestech VHS to DVD 3.0.30 Deluxe Local Buffer Overflow SEH Date: September 16, 2010 Author: Brennon Thomas [email protected] Software Link: n/a Version: 3.0.30.0 Deluxe buf = "\r\n\ \r\n\ \r\n\ \r\n\ MAINDLG\r\n\ PAGE=0\r\n\ \r\n\ AVICODEC\r\n\ VIDEOCODEC=DivX 6.8.5 Codec 2...

DVD-X-Player-5.5-Pro-SEH

DVD X Player 5.5 Pro Bypass ASLR by using non-aslr enabled module SEH Overwrite Egghunter is not needed as there is at least 2000 bytes for shellcode import sys print "====================================" print "DVD X Player 5.5 Pro Buffer Overflow" print " SEH Overwrite - Bypass ASLR " print "...

DVD X Player 5.5 .plf PlayList 缓冲区溢出漏洞

No description provided by source...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2375-1)

Ben Hawkes reported some off by one errors for report descriptors in the Linux kernel's HID stack. A physically proximate attacker could exploit these flaws to cause a denial of service out-of-bounds write via a specially crafted device. CVE-2014-3184 Several bounds check flaws allowing for buffe...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2354-1)

Chris Evans reported an flaw in the Linux kernel's handling of iso9660 compact disk filesystem images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service system crash or reboot. CVE-2014-5471 Chris Evans reported an flaw ...

Ubuntu: Security Advisory (USN-2355-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2354-1: Linux kernel vulnerabilities

Chris Evans reported an flaw in the Linux kernel's handling of iso9660 compact disk filesystem images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service system crash or reboot. CVE-2014-5471 Chris Evans reported an flaw ...

DVD X Player 5.5 Professional (.plf) Universal Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: DVD X Player 5.5 Professional .plf Universal Buffer Overflow Date: 29/08/2011 Author: D3r K0n!G Version: 5.5 Tested on: Windows XP SP3 CVE : N/A Greets to: All my friends;Dz& muslims sec4ever.com & h4kz.net my $file = dvd.plf; my...