mv-konradsheim.at XSS vulnerability

Open Bug Bounty ID: OBB-709276 Description| Value ---|--- Affected Website:| mv-konradsheim.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

MV Video Sharing Software 1.2 SQL Injection

Exploit Title: MV Video Sharing Software 1.2 - 'searchname' SQL Injection Dork: N/A Date: 2018-10-16 Exploit Author: Ihsan Sencan Vendor Homepage: https://melerovideo.com/software/ Software Link: https://sourceforge.net/projects/mvvideosharingsoftware/ Version: 1.2 Category: Webapps Tested on:...

mv-wiesen.info XSS vulnerability

Open Bug Bounty ID: OBB-645889 Description| Value ---|--- Affected Website:| mv-wiesen.info Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

HP VAN SDN Controller Root Command Injection Exploit

This Metasploit module exploits a hardcoded service token or default credentials in HPE VAN SDN Controller versions 2.7.18.0503 and below to execute a payload as root. A root command injection was discovered in the uninstall action's name parameter, obviating the need to use sudo for privilege...

Threat Outbreak Alert RuleID32912: Email Messages Distributing Malicious Software on June 7, 2018

Medium Alert ID: 58062 First Published: 2018 June 7 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32912 may contain the following files: Name | Size...

Fedora 27 : coreutils (2018-669520d2ba)

doc: warn about following symlinks recursively in chown/chgrp CVE-2017-18018 - mv -n: do not overwrite the destination - mv -n: provide more reliable diagnostic messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

mv-job.de XSS vulnerability

Open Bug Bounty ID: OBB-443422 Description| Value ---|--- Affected Website:| mv-job.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mv-sachsen-anhalt.de XSS vulnerability

Open Bug Bounty ID: OBB-441351 Description| Value ---|--- Affected Website:| mv-sachsen-anhalt.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Debian DSA-3996-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed Real, MV, RL2, ASF, Apple HLS, Phantom Cine, MXF, NSV, MOV or RTP H.264 files/streams are processed. %NASLMINLEVEL...

[SECURITY] [DSA 3996-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3996-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2017 https://www.debian.org/security/faq -...

mv-schloesser.de XSS vulnerability

Vulnerable URL: https://www.mv-schloesser.de/vrview/index.html?image=xss%22%3C/p%3E%3Ccenter%3E%3Ch1%3EType%20anything%3C/h1%3E%3Cp%3E%3Cinput%20type=search%20oninput=prompt/openbugbounty/%3E%3C/center%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.12.2017...

UBUNTU-CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

CVE-2017-14055

In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mvreadheader due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nbframes" field in the header but does not contain sufficient backing data, is provided, the loop over t...

mv-spion.de XSS vulnerability

Vulnerable URL: http://www.mv-spion.de/registrieren/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 512091 VIP website status:| No Check mv-spion.de SSL connection:| Grade: A Coordinated Disclosure Timeline:...

Threat Outbreak Alert RuleID29266: Email Messages Distributing Malicious Software on May 24, 2017

Medium Alert ID: 53953 First Published: 2017 May 24 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29266 may contain the following files: Name | Size...

PT-2016-3169

Name of the Vulnerable Software and Affected Versions FFmpeg version 3.3.3 Description The issue is related to a lack of an End of File EOF check in the mv read header function, which can cause huge CPU and memory consumption. This occurs when a crafted MV file with a large nb frames field in the...

PT-2016-3520

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to the vid dec set h264 mv buffers function in the Qualcomm components, which does not validate the number of buffers. This allows attackers to gain privileges via a crafted...

MV app - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MV app published at the 'play' market has multiple vulnerabilities...

Vine MV Cross-Site Scripting Vulnerability

Vine MV is a web application developed by Japanese software developer Ayaka Ikezawa that uses the Vine video sharing application API to automatically generate music videos. A cross-site scripting vulnerability exists in the main.rb file in versions of Vine MV prior to 2015-11-08. A remote attacke...