cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...

cve-2015-1538-1

PER FAVORE NON CONDIVIDERE QUESTO CON NESSUNO. QUESTO CODICE TI VIENE FORNITO AI SENSI DI FrienNDA. CHI VIOLA QUESTA REGOLA NON SARÀ PIÙ CONSIDERATO UN AMICO. È incluso uno script Python che genera un MP4 che sfrutta la vulnerabilità ‘stsc’, nota anche come CVE-2015-1538 1. Questa è una delle...

cve-2015-1538-1

एक पायथन स्क्रिप्ट शामिल है जो 'stsc' कमज़ोरी का शोषण करने वाला MP4 उत्पन्न करती है, जिसे अन्यथा CVE-2015-1538 1 के रूप में जाना जाता है। यह स्टेजफ़्राइट लाइब्रेरी में मेरे द्वारा रिपोर्ट की गई सबसे महत्वपूर्ण कमज़ोरियों में से एक है। शोषण का अपेक्षित परिणाम मीडिया उपयोगकर्ता के रूप में एक रिवर्स...

Chromium: CVE-2026-13986 Inappropriate implementation in Media UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13986

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

PT-2026-33774

Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitrary JavaScript by bypassing MIME type validation and renaming uploaded files to executable extensions. Attackers can prepend a GIF8...

CVE-2021-44096

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...