PT-2021-17187 · Unknown +1 · Henriquedornas +1

Name of the Vulnerable Software and Affected Versions: henriquedornas version 5.2.17 Description: A stored XSS issue exists via online live chat. It is reported that henriquedornas is a web design agency and 5.2.17 refers to the PHP version running on the host. Recommendations: For version 5.2.17...

File Upload Vulnerability in Arcvideo Live at Hangzhou Danghong Technology Co.

Arcvideo Live is an encoding and transcoding system based on real-time streaming media. A file upload vulnerability exists in Arcvideo Live of Hangzhou Danghong Technology Co. Ltd. that can be exploited by an attacker to gain control of a web server...

Important: kernel-livepatch-4.14.200-155.322

Issue Overview: A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/ttyio.c and drivers/tty/ttyjobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24. CVE-2020-29660 A locking vulnerability was found in the...

LIVE Webinar: Major Lessons to be Learned from Top Cyber Attacks in 2020

We likely all agree that 2020 was a year we won't soon forget - for many reasons. One area particularly impacted last year was and continues to be cybersecurity. While Internet access allowed many businesses to continue functioning during the COVID-19 stay at home requirements, the unprecedented...

Are TikTok’s new settings enough to keep kids safe?

TikTok, the now widely popular social media platform that allows users to create, share, and discover, amateur short clips—usually something akin to music videos—has been enjoying explosive growth since it appeared in 2017. Since then, it hasn’t stopped growing—more so during the current pandemic...

Streaming Traffic Peaks During Biden Inauguration

Live news streaming traffic during the Biden inauguration ceremony on January 20 peaked at 12 Tbps on the Akamai Intelligent Edge Platform. The peak, which occurred as now-President Biden was taking the oath of office just before 12 PM ET, is roughly 8x higher than what we typically see for mid-d...

Selea Targa IP OCR-ANPR Camera Stream Disclosure

Selea Targa IP OCR-ANPR Camera Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: Model: iZero Targa 512 Targa 504 Targa Semplice Targa 704 TKM Targa 805 Targa 710 INOX Targa 750 Targa 704 ILB Firmware: BLD201113005214...

Selea Targa 512 IP OCR-ANPR Camera - Stream Disclosure (Unauthenticated)

Exploit Title: Selea Targa IP OCR-ANPR Camera - RTP/RTSP/M-JPEG Stream Disclosure Unauthenticated Date: 07.11.2020 Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea Targa IP OCR-ANPR Camera Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure Vendor: Selea s.r.l. Product web...

Philips Multiple Products OS Command Injection Vulnerability

An operating system command injection vulnerability exists in various Philips products, which can be exploited by an attacker to modify the system commands expected to be executed by the system. The vulnerability exists in the following devices or models: Interventional Workspot Release 1.3.2,...

EV Live Assistant suffers from dll hijacking vulnerability

Ev Live Streaming Assistant is an unmanned live streaming software. EV Live Assistant suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file and gain control of the server...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Beili Live Ji suffers from dll hijacking vulnerability (CNVD-2021-08479)

Beep Live Ji a live broadcasting auxiliary tool. There is a dll hijacking vulnerability in Beili Live Ji. An attacker can exploit this vulnerability to execute malicious code...

Binary Vulnerability in Beep Live Ji

Beili Live Ji is a live broadcasting auxiliary tool. Beili Live Ji has a binary vulnerability that can be exploited by attackers to gain control of the server...

Beili Live Ji suffers from dll hijacking vulnerability

Beili Live Ji is a live broadcasting auxiliary tool. Beili Live Ji has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

CVE-2020-24027

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time...

Buffer overflow

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time...

CVE-2020-24027

CVE-2020-24027 concerns a potential buffer overflow in Live Networks, Inc.’s liblivemedia (version 20200625) when handling an RTSP “PLAY” command that specifies seeking by absolute time. The connected sources confirm the affected component and the root cause is a buffer overflow in the RTSP serve...

CVE-2020-24027

In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time...

CVE-2020-24027

Removed by vendor...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03443)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...