28154 matches found
CVE-2026-73324 VLC media player 3.0.0 through 3.0.23 Heap Out-of-Bounds Read via Unterminated RealRTSP Response Line
VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...
CVE-2026-73324
VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds read in the RTSP module. The root cause is that RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length without guaranteeing null termination, and rtsp_get in modules/access/rtsp/rtsp.c passes...
EUVD-2026-74906
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2026-56711
VLC media player 3.0.0 through 3.0.23 is affected by a heap out-of-bounds write caused by a 32-bit integer overflow in picture buffer allocation. In AllocatePicture (src/misc/picture.c), the fields i_pitch and i_lines are declared as int, so the multiplication wraps before widening to the size_t ...
CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 Heap Out-of-Bounds Write via Integer Overflow in Picture Allocation
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2026-56711 VLC media player 3.0.0 through 3.0.23 Heap Out-of-Bounds Write via Integer Overflow in Picture Allocation
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as ibytes += p-ipitch p-ilines, and both planet fields are declared int in include/vlcpicture.h, so the...
CVE-2008-4654
CVE-2008-4654 Полнофункциональный эксплойт для уязвимости переполнения буфера на стеке CVE-2008-4654 в VideoLan's VLC Media Player 0.9.4 при обработке TiVo-файлов. Он нацелен на 32-битный бинарник, работающий на 64-битной системе Windows, и использует WOW64-еггхантер для обхода ограниченного...
CVE-2018-15982
CVE-2018-15982 Исходные коды Flash для CVE-2018-15982, использованные NK это дамп полностью вооружённого ActiveX-объекта, использованного NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Полезные нагрузки находятся в Class 6 и 7...
CVE-2018-4878
저자 및 크레딧 저자: Vincent Yiu @vysecurity 크레딧: @evi1cg: 테스트와 동기 부여에 도움을 준 분 @smgoreli: 원본 Calc.exe PoC 제공자 @kbandla: 그분도 알고 저도 압니다. ; 면책 조항 더 많은 Aggressor 스크립트 개발을 장려하기 위해 개발되었습니다. 승인된 침투 테스트에서만 사용하십시오! 설명 2018년 2월 이전의 Shockwave Flash 플레이어 버전을 대상으로 하는 CVE-2018-4878 익스플로잇을 사용하여 Internet Explorer 드라이브바이...
CVE-2026-36433
Actions Semiconductor Media Player Utilities v.4.46 contains an arbitrary code execution vulnerability in the firmware update toolkit components Production.dll and RdiskUpgrade.exe . According to PT Security, the toolkit performs no signature verification, no checksum, and no authentication , all...
EUVD-2026-75164
An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...
PT-2026-88995
VLC media player copies an RTSP response line into a fixed buffer without guaranteeing termination and then treats that buffer as a C string. RtspReadLine in modules/access/rtsp/access.c calls strncpy with the full buffer length, which writes no terminator when the source line is at least as long...
PT-2026-88993
VLC media player computes the size of a picture buffer with 32-bit arithmetic and allocates from the wrapped result. In AllocatePicture in src/misc/picture.c the running total is accumulated as i bytes += p-i pitch p-i lines, and both plane t fields are declared int in include/vlc picture.h, so t...
CVE-2008-4654
CVE-2008-4654 脆弱性CVE-2008-4654のPoCエクスプロイト – VLC Media PlayerのTiVo Tyファイル拡張子を介したスタックベースのバッファオーバーフロー。 使用方法 スクリプトと同じフォルダ内にサンプルの.ty+ファイルを用意してスクリプトを実行してください。VLC Media Playerで開かれるとペイロードが実行されるように.ty+ファイルが変更されます。ペイロードを含むファイルはPOCPayload.ty+という名前になります。 root@kitploit: python3 payloadGeneratorCVE-2008-4654.p...
Flash-player
Fake-flash.cn www.flash.cn의 피싱 페이지, 중국어+영어 온라인 미리보기: http://fake-flash.se7ensec.cn/...
CVE-2026-72960
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-70203
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
EUVD-2026-73726
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-70203
CVE-2026-70203 is a heap-based buffer overflow in Windows Media Player that allows an unauthorized attacker to execute code over a network . The vulnerability is classified as Remote Code Execution with a CVSS 3.1 score of 8.8 (HIGH) , reflecting a network attack vector, low complexity, no requir...