Lucene search
+L

1219 matches found

zdt
zdt
added 2017/05/04 12:00 a.m.59 views

Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Exploit

Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO, 1.7.1, 1.7.0, and 1.6.1 suffers from a REST API arbitrary code execution vulnerability. !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Vendor: Petr Nejedly | Six Lines Ltd Product web...

7.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:00 a.m.14 views

The vulnerability of the Android operating system allows attackers to increase their privileges and gain access to confidential information.

The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain access to confidential information...

4.3CVSS6.2AI score0.00519EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:00 a.m.13 views

The vulnerability of the Android operating system, which allows a violator to compromise data privacy

The vulnerability of the Mediaserver application for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

4.3CVSS6.3AI score0.00597EPSS
SaveExploits0References4Affected Software1
Packet Storm
Packet Storm
added 2017/05/04 12:00 a.m.57 views

Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution

!/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Code Execution Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO, 1.7.1, 1.7.0, 1.6.1 Summary: Serviio is a free media server. It allows you to stream your...

0.7AI score
SaveExploits0
zdt
zdt
added 2017/05/04 12:00 a.m.46 views

Serviio PRO 1.8 DLNA Media Streaming Server (mediabrowser) XSS Vulnerability

Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO, 1.7.1, 1.7.0, and 1.6.1 suffer from a mediabrowser cross site scripting vulnerability. Serviio PRO 1.8 DLNA Media Streaming Server mediabrowser DOM Based XSS Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org...

6.7AI score
SaveExploits0
zdt
zdt
added 2017/05/04 12:00 a.m.73 views

Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change Exploit

Serviio PRO DLNA Media Streaming Server versions 1.8.0.0 PRO, 1.7.1, 1.7.0, and 1.6.1 suffer from a REST API arbitrary password change vulnerability. !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change Vendor: Petr Nejedly | Six Lines Ltd Product we...

7.3AI score
SaveExploits0
zdt
zdt
added 2017/05/04 12:00 a.m.38 views

Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation

Serviio PRO DLNA Media Streaming Server version 1.8.0.0 PRO suffers from a local privilege escalation vulnerability. Serviio PRO 1.8 DLNA Media Streaming Server Local Privilege Escalation Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO...

0.7AI score
SaveExploits0
exploitpack
exploitpack
added 2017/05/03 12:00 a.m.37 views

Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change

Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change !/usr/bin/env python Serviio PRO 1.8 DLNA Media Streaming Server REST API Arbitrary Password Change Vendor: Petr Nejedly | Six Lines Ltd Product web page: http://www.serviio.org Affected version: 1.8.0.0 PRO, 1.7.1,...

0.5AI score
SaveExploits0
Metasploit
Metasploit
added 2017/05/03 12:00 a.m.25 views

Serviio Media Server checkStreamUrl Command Execution

This module exploits an unauthenticated remote command execution vulnerability in the console component of Serviio Media Server versions 1.4 to 1.8 on Windows operating systems. The console service on port 23423 by default exposes a REST API which which does not require authentication. The 'actio...

9.3CVSS5.7AI score0.0309EPSS
SaveExploits2
zdt
zdt
added 2017/05/01 12:00 a.m.51 views

Emby MediaServer 3.2.5 - Password Reset Vulnerability

Exploit for multiple platform in category web applications Emby MediaServer 3.2.5 Password Reset Vulnerability Vendor: Emby LLC Product web page: https://www.emby.media Affected version: 3.2.5 3.1.5 3.1.2 3.1.1 3.1.0 3.0.0 Summary: Emby formerly Media Browser is a media server designed to organiz...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2017/03/16 12:00 a.m.11 views

Evostream Media Server Denial of Service Vulnerability

Evostream Media Server is a software that supports efficient multi-platform media streaming delivery. A denial of service vulnerability exists in Evostream Media Server. An attacker could exploit this vulnerability to corrupt the application and cause a denial of service...

7.5CVSS6.7AI score0.07234EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:00 a.m.12 views

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mediaserver component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a specially crafte...

7.1CVSS5.9AI score0.00616EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:00 a.m.11 views

The vulnerability of the Android operating system, which allows a hacker to trigger memory corruption

The vulnerability of the Mediaserver application in the Android operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using a specially...

9.3CVSS7.7AI score0.01422EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:00 a.m.11 views

The vulnerability of the Android operating system, which allows a hacker to trigger memory corruption

The vulnerability of the Mediaserver application in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using a specially...

9.3CVSS7.8AI score0.01422EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2017/03/10 10:59 a.m.15 views

Buffer overflow

A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request...

5CVSS7.5AI score0.07234EPSS
SaveExploits5References2Affected Software1
NVD
NVD
added 2017/03/10 10:59 a.m.23 views

CVE-2017-6427

A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request...

7.5CVSS7.5AI score0.07234EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2017/03/10 10:29 a.m.26 views

CVE-2017-6427

A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will cause a crash. An example attack methodology may include a long message-body in a GET request...

7.5AI score0.07234EPSS
SaveExploits5References2
CVE
CVE
added 2017/03/10 10:29 a.m.60 views

CVE-2017-6427

Evostream Media Server 1.7.1 is affected by a Buffer Overflow vulnerability triggered by a crafted HTTP header in requests (e.g., a long message-body in a GET). This can crash the server and enable a denial‑of‑service. Public advisories and exploit records (Exploit‑DB 41547, Packet Storm, 0day.to...

7.5CVSS7.5AI score0.07234EPSS
SaveExploits5References2Affected Software1
zdt
zdt
added 2017/03/08 12:00 a.m.60 views

Evostream Media Server 1.7.1 (x64) - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: Evostream Media Server 1.7.1 – Built-in Webserver DoS Date: 2017-03-07 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: https://evostream.com/software-downloads/ Version: 1.7.1 Tested on:...

5CVSS0.1AI score0.07234EPSS
SaveExploits5
exploitpack
exploitpack
added 2017/03/07 12:00 a.m.52 views

Evostream Media Server 1.7.1 (x64) - Denial of Service

Evostream Media Server 1.7.1 x64 - Denial of Service Exploit Title: Evostream Media Server 1.7.1 – Built-in Webserver DoS Date: 2017-03-07 Exploit Author: Peter Baris Vendor Homepage: http://www.saptech-erp.com.au Software Link: https://evostream.com/software-downloads/ Version: 1.7.1 Tested on:...

5CVSS0.2AI score0.07234EPSS
SaveExploits5
Rows per page
Query Builder