WS-2019-0261

Pivideorecording is vulnerable to Remote Code Execution RCE. Due to insufficient input validation the server can executes arbitrary code through the /api/record/start endpoint...

AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php

Summary The standalone live stream control endpoint at plugin/Live/standAloneFiles/control.json.php accepts a user-supplied streamerURL parameter that overrides where the server sends token verification requests. An attacker can redirect token verification to a server they control that always...

PT-2020-21214

Name of the Vulnerable Software and Affected Versions pi video recording versions all Description The issue concerns insufficient input validation, allowing for Remote Code Execution. An attacker can execute arbitrary code on the server through the "/api/record/start" endpoint. For example, using...

UBUNTU-CVE-2016-7952

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service infinite loop via a reply in the 1 XRecordStartOfData, 2 XRecordEndOfData, or 3 XRecordClientDied category without a client sequence and with attached data...