CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

DLL_Injection_On_VLC

DLL Injection and CVE-2010-3124 Overview 🌱 This project explores the topic of DLL Dynamic Link Library injection and specifically focuses on the CVE-2010-3124. CVE-2010-3124 refers to an untrusted search path vulnerability found in VLC Media Player version 1.1.3 and earlier. Here are key points...

CVE-2008-4654

CVE-2008-4654 PoC exploit for vulnerability CVE-2008-4654 VLC Media Player Stack-Based Buffer Overflow via TiVo Ty file extension. Usage Run the script having a sample .ty+ file inside the same folder as the script. The ty+ file will be modified to execute the payload when opened with VLC Media...

CVE-2026-96096

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-96096

A Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CRITICAL CVSS v3.1 base score of 9.8 . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the ge...

Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96096: Windows Media Player Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

MGASA-2026-0494 Updated vlc package fixes security vulnerabilities

VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability. CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability. CVE-2026-73324...

Updated vlc package fixes security vulnerabilities

VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability. CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability. CVE-2026-73324...

CVE-2008-4654

CVE-2008-4654 VideoLAN VLC media player 0.9.4 Media Player ty.c buffer overflow Diff...

CVE-2026-104678

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

WordPress CP Media Player plugin < 1.3.4 - Contributor+ Media Player Settings Update vulnerability

Contributor+ Media Player Settings Update vulnerability discovered by Ryan Fabella in WordPress Plugin CP Media Player versions 1.3.4...

EUVD-2026-94183

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678 CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678

The CP Media Player WordPress plugin (versions before 1.3.4 ) is vulnerable to an improper access control flaw in its settings-page handler . Due to a lack of capability checks, users with only Contributor-level access can perform actions reserved for administrators, such as creating, modifying, ...

PT-2026-107406

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

CVE-2026-104678: Improper Access Control

The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin...

Windows Media Player Code Execution

The vulnerability of the Windows Media Player media player on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Astra Linux – Vulnerability in vlc

An integer overflow in the VNC module of the VideoLAN VLC Media Player, as of version 3.0.17.4, allows attackers to exploit this vulnerability by tricking users into opening a specially crafted playlist or connecting to a malicious VNC server. This can result in the crash of the VLC player or the...