2108 matches found
PoCForCVE-2015-1528
该 PoC 分为三个部分， 文件夹 mediaserver 帮助从普通应用向 mediaserver 注入代码。 文件夹 surfaceflinger 帮助在获得 mediaserver 权限后向 surfaceflinger 注入代码。 文件夹 systemserver 帮助在获得 surfaceflinger 权限后向 systemserver 注入代码。 文件夹 bbshell 帮助将 busybox 注入到 mediaserver。 该 PoC 包含许多硬编码，我是在 Android 5.0LRX21O 的 Nexus 5 上测试的，你可能需要调整这些硬编码以适应你的情况。...
cve-2014-7920-7921_update
cve-2014-7920-7921 针对CVE-2014-7920和CVE-2014-7921的漏洞利用代码 - 在Android 5.1及以下版本的mediaserver中实现代码执行 此漏洞利用中的符号针对Android 4.3，但可适配至Android 5.1及以下任何版本。...
CVE-2015-6620-POC
CVE-2015-6620-POC-1 CVE-2015-6620-1（ANDROIDID-24123723）中一个漏洞的POC，AMessage反序列化时的任意写入。两个漏洞合并为一个CVE，此处是其中之一的POC。 解释 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt32; 535 sp msg = new AMessagewhat; 536 537 msg-mNumItems = staticcastparcel.readInt32; //mNumItems可由攻击者设...
[SECURITY] Fedora 45 Update: rygel-46.0-2.fc45
Rygel is a home media solution that allows you to easily share audio, video a nd pictures, and control of media player on your home network. In technical terms it is both a UPnP AV MediaServer and MediaRenderer implemented through a plug -in mechanism. Interoperability with other devices in the...
cve-2014-7920-7921
cve-2014-7920-7921 针对CVE-2014-7920和CVE-2014-7921的利用代码 - 影响Android 5.1及以下版本的mediaserver中的代码执行漏洞 该利用代码中的符号适用于Android 4.3，但可适配至Android 5.1的任何版本。...
CVE-2026-58127
PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET...
CVE-2026-3966 648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery
A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java/com/genersoft/iot/vmp/media/abl/ABLMediaNodeServerService.java of the component IP Address Handler. The manipulation of the...
CVE-2026-3966 648540858 wvp-GB28181-pro IP Address ABLMediaNodeServerService.java getDownloadFilePath server-side request forgery
A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107. Affected by this vulnerability is the function getDownloadFilePath of the file /src/main/java/com/genersoft/iot/vmp/media/abl/ABLMediaNodeServerService.java of the component IP Address Handler. The manipulation of the...
CVE-2009-4482
Buffer overflow in MediaServer.exe in TVersity 1.6 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by the vdtversity module in VulnDisco Pack Professional 8.11. NOTE: as of 20091229, this disclosure has no actionable information. However, because the...
CVE-2020-24375
A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...
EUVD-2015-3897
Malware in sbrugna...
EUVD-2017-2724
Malware in sbrugna...
EUVD-2020-17105
Malware in sbrugna...
EUVD-2014-7771
Malware in sbrugna...
EUVD-2017-0823
Malware in sbrugna...
EUVD-2017-0822
Malware in sbrugna...
EUVD-2017-0943
Malware in sbrugna...
EUVD-2017-0735
Malware in sbrugna...