CVE-2015-0311

Перезаливка старого порта эксплойта для CVE-2015-0311 Use-after-free в Adobe Flash Player под Linux/Firefox, созданного мной в образовательных целях...

RP_RecordClip_DLL_Hijack

Real Player의 원격 DLL 하이재킹 취약점 CVE-2022-32291 Real Converter 시작 시 취약해지는 Player 애플리케이션과 Recording Manager는 존재하지 않는 DLL을 안전하지 않게 검색하기 때문에 원격 DLL 하이재킹바이너리 플랜팅 문제가 발생하기 쉽습니다. 이 문제를 악용하려면 공격자는 대상이 WebDAV 또는 SMB 공유에서 미디어 파일을 열도록 유도해야 합니다. V.20.1.0.312 이전의 Real Player의 경우: RAM 파일과 HTML 파일을 편집하고 "%server%"...

RP_Import_RCE

Real Player 'external::Import' 임의 파일 다운로드, 디렉터리 트래버설 취약점으로 인한 원격 코드 실행 비디오 데모: https://youtu.be/CONlijEgDLc Real Player는 Microsoft Internet Explorer 기능을 사용하며, 애플리케이션별 특수 수단을 통해 속성과 메서드를 노출합니다: 'external' 객체는 여러 사용자 지정 메서드와 속성을 노출합니다. 'Import' 메서드는 'Copy to My Music' 매개변수와 관련하여 안전하지 않은 방식으로 처리되며, ...

RP_DCP_Code_Exec

Real Player 'DCP://' URI 원격 임의 코드 실행 취약점 동영상 데모: https://youtu.be/AMODp3iTnqY 'DCP://' URI 스킴은 Real Player가 플레이어 브라우저 탭에 표시할 URL을 가져오는 데 사용하는 내부 프로토콜입니다. 이는 'Data Cache Protocol'을 의미합니다. '%appdata%\real\realplayer'에서 파일을 검색합니다. 이 파일들은 다음 코드를 포함하는 단순한 '.ini' 파일입니다: ---sampledcp.ini--- urls...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' 원격 코드 실행 취약점 비디오 데모: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control 구성 요소에는 원격 코드 실행 취약점이 있습니다. 그 이유는 'javascript:' URI를 인자로 전달할 수 있기 때문인데, 이는 일반적으로 안전하지 않습니다. 일부 시나리오에서는 임의 도메인에 스크립트 코드를 주입할 수 있게 하여Universal Cross Site Scripting...

UBUNTU-CVE-2026-73324

VLC media player copies an RTSP response line into a fixed buffer with...

Linux Distros Unpatched Vulnerability : CVE-2026-56711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c th...

CVE-2026-73324

VLC media player copies an RTSP response line into a fixed buffer with...

CVE-2026-56711

VLC media player computes the size of a picture buffer with 32-bit ari...

UBUNTU-CVE-2026-56711

VLC media player computes the size of a picture buffer with 32-bit ari...

CVE-2026-36433

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...

CVE-2026-73324

A flaw was found in VLC media player. A remote attacker operating a hostile server can exploit a heap out-of-bounds read vulnerability. This occurs when the media player processes an unterminated Real Time Streaming Protocol RTSP response line, causing it to read beyond the allocated buffer...

CVE-2026-56711

A flaw was found in VLC media player. An integer overflow vulnerability exists when computing the size of a picture buffer, specifically in the AllocatePicture function. A remote attacker could exploit this by providing a specially crafted Portable Network Graphics PNG image file with large width...

CVE-2026-73324

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...

CVE-2026-56711

VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...

CVE-2026-86204 PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket

PocketMine-MP versions before 5.39.2 fail to limit JSON payload size in ModalFormResponsePacket handling, allowing authenticated players to cause denial of service. Attackers can send modal form response packets with massive JSON arrays to exhaust server memory and CPU resources, rendering the...

CVE-2026-86198 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket

PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUSCOMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player...

CVE-2026-86198

PocketMine-MP versions before 5.44.2 are vulnerable to a denial-of-service condition in the resource pack handling subsystem. The root cause is a failure to properly validate multiple ResourcePackClientResponsePacket packets carrying the STATUS_COMPLETED status, which allows malicious clients to ...

CVE-2026-86198 PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket

PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUSCOMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player...

EUVD-2026-74907

VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...