CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4020

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Meetecho Janus 跨站脚本漏洞

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A cross-site scripting vulnerability exists in Meetecho janus gateway, which stems from the software's lack of effective filtering and validation of user-submitted parameters...

PT-2021-22841 · Unknown +1 · Janus-Gateway +1

Name of the Vulnerable Software and Affected Versions: janus-gateway affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...

CVE-2021-4020: Improper Neutralization of Input During Web Page Generation

janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway

Description an user can enter a text room in janus gateway with a malicious name that contains a xss payload and could poison other users on the room Proof of Concept just go to https://janus.conf.meetecho.com/textroomtest.html this is provided by github repo as a demo then enter in the name POC...

janus-gateway:sdp_fuzzer: Use-of-uninitialized-value in janus_sdp_parse

Detailed Report: https://oss-fuzz.com/testcase?key=6197317464621056 Project: janus-gateway Fuzzing Engine: libFuzzer Fuzz Target: sdpfuzzer Job Type: libfuzzermsanjanus-gateway Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: janussdpparse sdpfuzzer.c gmalloc...

janus-gateway:rtcp_fuzzer: Use-of-uninitialized-value in janus_rtcp_incoming_transport_cc

Detailed Report: https://oss-fuzz.com/testcase?key=4853666004205568 Project: janus-gateway Fuzzing Engine: libFuzzer Fuzz Target: rtcpfuzzer Job Type: libfuzzermsanjanus-gateway Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: janusrtcpincomingtransportcc...

Tencent Happy Mahjong Full Existence Janus Android Signature Vulnerability

Tencent Happy Mahjong Full Set is Tencent's first classic 3D free mahjong game. Tencent Happy Mahjong Full Collection has Janus Android signature vulnerability, which can be exploited by attackers to obtain system root privileges...

Tencent Guangdong Mahjong suffers from Janus Android signature vulnerability

Tencent Guangdong Mahjong is Tencent's first Guangdong Mahjong game. Tencent Guangdong Mahjong has a Janus Android signature vulnerability, which can be exploited by attackers to obtain system root privileges...

Tencent Live suffers from Janus Android signature vulnerability

Tencent Live is a live streaming software. Tencent Live exists Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...

Tencent Maps suffers from Janus Android signature vulnerability

Tencent Map is an Internet mapping service. Tencent Maps has a Janus Android signature vulnerability that can be exploited by an attacker to gain root access to the system...

WeChat Phonebook suffers from Janus Android signature vulnerability

WeChat Phonebook is an intelligent communication enhancement software created by Tencent. WeChat Phonebook suffers from a Janus Android signature vulnerability. Attackers can use the vulnerability to obtain system root privileges...

Watermark Camera Has Janus Android Signature Vulnerability

Watermark Camera is a photo beautification mobile software. Watermark Camera has a Janus Android signature vulnerability that can be exploited by attackers to gain root access to the system...

WeChat suffers from Janus Android signature vulnerability

WeChat is a cell phone communication software. WeChat has a Janus Android signature vulnerability that can be exploited by an attacker to gain root access to the system...

Tencent Classroom Has Janus Android Signature Vulnerability

Tencent Classroom is a professional online education platform launched by Tencent. Tencent Classroom has a Janus Android signature vulnerability, which can be exploited by an attacker to obtain system root privileges...

Tencent Search Live Help has Janus Android Signature Vulnerability

Tencent search live help is professional skills online simply service platform. Tencent search live help exist Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...

Janus Signature Vulnerability in Jingming Butler

Jingming Butler is a customized mobile version of the business center for Jingdong to home merchants, merchants can receive, process, query, audit orders through the Jingming Butler, to complete a series of online business operations. A Janus signature vulnerability exists in Jingming Butler, whi...

Janus Vulnerability in Ali Smart App

Ali Intelligence app is a mobile client made by Alibaba based on its Ali Intelligence IoT platform. Ali Intelligence App has a Janus vulnerability that can be exploited by an attacker to gain control of the server...

Janus Signature Vulnerability in QQ Extreme Edition for Android

QQ Extreme is a chatting and socializing app. A Janus signature vulnerability exists in QQ Extreme Edition for Android. An attacker can exploit the vulnerability to gain server privileges...