4054 matches found
CVE-2008-4654
CVE-2008-4654 针对VideoLan的VLC Media Player 0.9.4在处理TiVo文件时出现的栈缓冲区溢出漏洞CVE-2008-4654的功能完整的利用程序。它针对运行在64位Windows系统上的32位二进制文件，并使用WOW64 egghunter来绕过有限的栈空间。 使用方法 更新脚本 ： 将脚本中的占位符 buf = b'...' 替换为你自己的shellcode（例如，来自 msfvenom）。 如果需要不同的标签或自定义egghunter，可酌情调整 EGGHUNTERWOW64 shellcode。 python .\CVE-2008-4654.p...
CVE-2008-4654
CVE-2008-4654 Exploit PoC para la vulnerabilidad CVE-2008-4654 desbordamiento de búfer basado en pila en VLC Media Player a través de la extensión de archivo TiVo Ty. Uso Ejecute el script teniendo un archivo .ty+ de muestra en la misma carpeta que el script. El archivo ty+ se modificará para...
CVE-2026-102875
A flaw was found in VLC media player. An attacker can achieve arbitrary code execution by convincing a user to open a maliciously crafted skin archive. Because the theme loader fails to properly validate member file paths within the archive, files containing directory traversal sequences can be...
CVE-2026-102875
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...
DEBIAN-CVE-2026-102875
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...
EUVD-2026-89410
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...
CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...
CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...
CVE-2026-102875
VLC media player before version 3.0.24 is vulnerable to a path traversal vulnerability within the skins2 ThemeLoader . The root cause is a failure to validate member names in .vlt skin archives , which allows an attacker to craft malicious skin files containing path traversal sequences. This can ...
[SECURITY] Fedora 44 Update: vlc-3.0.24-1.fc44
VLC media player is a highly portable multimedia player and multimedia framew ork capable of reading most audio and video formats as well as DVDs, Audio CDs VC Ds, and various streaming protocols. It can also be used as a media converter or a server to stream in uni-cast or multi-cast in IPv4 or...
CVE-2008-4654
CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c 缓冲区溢出 差异...
DLL_Injection_On_VLC
DLLインジェクションとCVE-2010-3124 概要 🌱 このプロジェクトでは、DLL（ダイナミックリンクライブラリ）インジェクションのトピックを探求し、特にCVE-2010-3124に焦点を当てています。 CVE-2010-3124は、VLC Media Playerバージョン1.1.3以前に見つかった信頼できない検索パスの脆弱性を指します。 このプロジェクトの概要をより深く理解するための重要なポイントは以下の通りです： 脆弱性 : VLC Media Playerがダイナミックリンクライブラリ（DLL）を読み込む際に使用する安全でない検索パスが原因で問題が発生します。 攻撃シナリ...
[SECURITY] Fedora 45 Update: vlc-3.0.23-18.fc45
VLC media player is a highly portable multimedia player and multimedia framew ork capable of reading most audio and video formats as well as DVDs, Audio CDs VC Ds, and various streaming protocols. It can also be used as a media converter or a server to stream in uni-cast or multi-cast in IPv4 or...
The vulnerability of the VideoLAN VLC media player lies in its ability to read data beyond the permitted range of memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the VideoLAN VLC media player lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the VideoLAN VLC media player software, related to integer overflow, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the VideoLAN VLC media player lies in a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Astra Linux – Vulnerability in vlc
Videolan VLC prior to version 3.0.20 contains an integer underflow issue that can lead to incorrect packet lengths being displayed...
Astra Linux – Vulnerability in vlc
An integer overflow in the VNC module of the VideoLAN VLC Media Player, as of version 3.0.17.4, allows attackers to exploit this vulnerability by tricking users into opening a specially crafted playlist or connecting to a malicious VNC server. This can result in the crash of the VLC player or the...
Linux Distros Unpatched Vulnerability : CVE-2026-56711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing crafted media. Exploitation requires user...
Linux Distros Unpatched Vulnerability : CVE-2026-73324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controll...