MAL-2022-6323 Malicious code in streamer-market-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c6f1e291b3a5d435c62a8477ffbbb7e62e15250973dd23955f3bea0baff557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML Entity Expansion

xlsx-streamer is vulnerable to XML entity expansion which is also known as XML Bombs. Lack of necessary settings to prevent XML Entity Expansion issues allows an attacker to pass malicious XML object via XML parser...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

The CVE-2021-42712 issue affects Splashtop Streamer up to version 3.4.8.3, where the application creates temporary files in a directory with insecure permissions. This root cause can lead to unauthorized access to temporary data and potential impact to confidentiality, integrity, and availability...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Splashtop Streamer 安全漏洞

Splashtop Streamer is a remote access and remote support software from the American company Splashtop. It is installed on the computer on the controlled end. A security vulnerability exists in Splashtop Streamer that stems from Splashtop Streamer version 3.4.8.3 creating temporary files in...

CVE-2020-7881

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

Twitch hacked- Source code and Streamer payment figures leaked

By Waqas Twitch has undergone a massive hack resulting in leaking the source code for its unreleased streaming service, creator payout details, and other sensitive information. This is a post from HackRead.com Read the original post: Twitch hacked- Source code and Streamer payment figures leaked...

Cross-Site Request Forgery (CSRF) in azuracast/azuracast

✍️ Description Attacker able to enable any Streamer/DJ account section with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your...

Command Execution Vulnerability in Splashtop Streamer

Splashtop Streamer is a remote control system. Splashtop Streamer suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

serenity:FuzzBMPLoader: Heap-buffer-overflow in Gfx::Streamer::read_u8

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6281654599155712 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzBMPLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000002...

The vulnerability of the configd Streamer Log component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd component in the Streamer Log system of the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

ENTTEC Lighting Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: ENTTEC Equipment: Datagate Mk2, Storm 24, Pixelator, E-Streamer Mk2 Vulnerabilities: Use of Hard-coded Cryptographic Key, Cross-site Scripting, Improper Access Control...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

Privilege escalation

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...