copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

Summary An unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. Details Multimedia metadata is rendered in the web-app without sanitization. This can be exploited in two way...

GHSA-9Q4R-X2HJ-JMVR copyparty has DOM-Based XSS vulnerability when displaying multimedia metadata

Summary An unauthenticated attacker is able to execute arbitrary JavaScript code in a victim's browser due to improper sanitization of multimedia tags in music files, including m3u files. Details Multimedia metadata is rendered in the web-app without sanitization. This can be exploited in two way...

PT-2025-31150

Name of the Vulnerable Software and Affected Versions copyparty versions up to and including 1.18.4 Description copyparty is a portable file server susceptible to cross-site scripting XSS. An unauthenticated attacker can execute arbitrary JavaScript code in a victim’s browser due to improper...

On Anti-Collusion Codes for Averaging Attack in Multimedia Fingerprinting

Multimedia fingerprinting is a technique to protect the copyrighted contents against being illegally redistributed under various collusion attack models. Averaging attack is the most fair choice for each colluder to avoid detection, and also makes the pirate copy have better perceptional quality...

CVE-2025-7798 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injection

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affects an unknown part of the file /admin/system/structure/getdirectorydata/web/baseinfo/companyManage. The manipulation of the argument...

CVE-2025-7798 Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System companyManage sql injection

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affects an unknown part of the file /admin/system/structure/getdirectorydata/web/baseinfo/companyManage. The manipulation of the argument...

PT-2025-30082 · Beijing Shenzhou Shihan Technology · Multimedia Integrated Business Display System

Name of the Vulnerable Software and Affected Versions: Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System versions up to 8.2 Description: A critical vulnerability exists in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System. The...

Shenzhou Shihan Technology Multimedia Integrated Business Display System 安全漏洞

Shenzhou Shihan Technology Multimedia Integrated Business Display System is a multimedia integrated business display system from Shenzhou Shihan Technology China. A security vulnerability exists in Shenzhou Shihan Technology Multimedia Integrated Business Display System version 8.2 and prior...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or disclose protected information.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or disclose protected information...

The vulnerability of the gf_odf_ac4_cfg_alternative_info function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the gfodfac4cfgalternativeinfo function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

PT-2025-33660 · Gnu +1 · Gpac +1

Уязвимость функции gf ac4 pres b 4 back channels present утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the gf_filter_pid_get_packet function in the MP4Box utility of the GPAC multimedia platform allows a intruder to cause a service failure or execute arbitrary code.

The vulnerability of the gffilterpidgetpacket function in the MP4Box utility of the GPAC multimedia platform is related to the pointer being set to an expired value. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

[SECURITY] [DLA 4241-1] ffmpeg security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4241-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk July 14, 2025 https://wiki.debian.org/LTS -...

PT-2025-33658 · Gnu +1 · Gpac +1

Уязвимость функции gf filter pid inst swap delete task утилиты MP4Box мультимедийной платформы GPAC связана с использованием после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-30032 · Gnu +1 · Gpac +1

Уязвимость функции gf ac4 parser bs утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-30033 · Gnu +1 · Gpac +1

Уязвимость функции gf ac4 parser bs утилиты MP4Box мультимедийной платформы GPAC связана с чтением за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или раскрыть защищаемую информацию...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-2025-18623)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

PT-2025-29849 · Gnu +1 · Gpac +1

Уязвимость функции gf filter pid reconfigure task discard файла src/filter core/filter pid.c, мультимедийной платформы GPAC связана с выходом операции за границы буфера в памяти в результате разыменования указателя с истекшим сроком действия. Эксплуатация уязвимости может позволить нарушителю...

PT-2025-29850 · Gnu +1 · Gpac +1

Уязвимость компонента naludmx configure pid функции gf sei load from state internal файла filters/sei load.c, мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании за счет аварийного завершения...