CVE-2026-4984

CVE-2026-4984 affects Botpress’s Twilio integration webhook handler. The vulnerability arises because the webhook accepts POST requests without validating Twilio’s X-Twilio-Signature, and when processing media messages it fetches user-controlled URLs (MediaUrlN) via HTTP requests that include the...

EUVD-2023-25549

Malicious code in bioql PyPI...

CVE-2023-21381

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21381

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21381

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21381

CVE-2023-21381 is an Android vulnerability reported across multiple sources, with concrete details indicating a local use-after-free in the Media Resource Manager that enables possible local arbitrary code execution and local escalation of privilege without user interaction. The Android 14 releas...

CVE-2023-21381

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21381

In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-18157 · Unknown · Media Resource Manager

Name of the Vulnerable Software and Affected Versions: Media Resource Manager affected versions not specified Description: The issue is related to a possible local arbitrary code execution due to use after free in Media Resource Manager. This could lead to local escalation of privilege with no...

Google Chrome Media Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc.Media is a multimedia component. A resource management error vulnerability exists in media in versions of Google Chrome prior to 77.0.3865.75. A remote attacker can exploit this vulnerability to execute arbitrary code on a system with the help of a...

Kaltura - Remote PHP Code Execution over Cookie Exploit

This Metasploit module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura makes use of a hard-coded cookie secret which allows to sign arbitrary cookie data...

Kaltura Remote PHP Code Execution over Cookie

This module exploits an Object Injection vulnerability in Kaltura. By exploiting this vulnerability, unauthenticated users can execute arbitrary code under the context of the web server user. Kaltura makes use of a hardcoded cookie secret which allows to sign arbitrary cookie data. After passing...

CVE-2005-3989

Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service memory consumption via crafted VoIP packets...

CVE-2005-3989

Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service memory consumption via crafted VoIP packets...

CVE-2005-3989

CVE-2005-3989 concerns a memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack on firmware older than vintage 9. The issue allows remote attackers to induce a denial of service through crafted VoIP packets, with network access, no authentication, and resulting in memory consumption lea...