CVE-2024-3462

Ant Media Server Community Edition is vulnerable to an improper HTTP header-based authorization in its default configuration. This flaw allows unauthorized users to potentially access non-administrative API calls that are reserved exclusively for authorized users. The vulnerability affects versio...

Login bruteforce

Description According to the fix of the previous report, the login page has a rate limit mechanism to block the user’s IP when many attempts are made. The endpoint, for example, /v2/console/status only returns the content when who made the request has the correct rights. However, this request is...

IceCast buffer overflow

Authorization: HTTP header buffer overflow...

ZoneEdit Account Hijack Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== secondmotion-SM-SA-02-02 Security Advisory ===================================================================== Topic: ZoneEdit Account Hijack Vulnerability Announced: 2002-11-05...