4473 matches found
UBUNTU-CVE-2018-1999011
FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asfo format demuxer that can result in heap-buffer-overflow that may result in remote code execution. This attack appears to be exploitable via specially crafted ASF file that has to be...
Experiment: Improving Page Load Times with Script Streaming
...
HTTPS+TLS and IPv6-enablement both in the majority for World Cup streaming
The underlying protocols of the Internet continue to evolve, and massive events such as the World Cup are a great opportunity to see this in action. A single-match peak for live video streaming of 22.5 Tbps was set on Akamai on Tuesday July 10 during the semi-final in Russia between France and...
HTTP+TLS and IPV6-Enablement Both in the Majority for World Cup Streaming
The underlying protocols of the Internet continue to evolve, and massive events such as the World Cup are a great opportunity to see this in action...
HTTP+TLS and IPV6-Enablement Both in the Majority for World Cup Streaming
The underlying protocols of the Internet continue to evolve, and massive events such as the World Cup are a great opportunity to see this in action...
Teradek VidiU Pro 3.0.3 CSRF Change Password Exploit
Summary The Teradek VidiU gives you the freedom to broadcast live high definition video directly to the Web without a PC. Whether you're streaming out of a video switcher or wirelessly from your camera, VidiU allows you to go live when you want, where you want. VidiU offers API level integration...
June 26, 2018—KB4284848 (OS Build 17134.137)
None None...
Clustering App Attacks with Machine Learning Part 3: Algorithm Results
In the previous blog posts in this series, we discussed the motivation for clustering attacks and the data used and how to calculate the distance between two attacks using different methods on each feature we extracted. In this final blog post, we’ll discuss the clustering algorithm itself – how ...
node.js -- multiple vulnerabilities
Node.js reports: Denial of Service Vulnerability in HTTP/2 CVE-2018-7161 All versions of 8.x and later are vulnerable and the severity is HIGH. An attacker can cause a denial of service DoS by causing a node server providing an http2 server to crash. This can be accomplished by interacting with t...
ALPINE-CVE-2018-1000301
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have...
Teradek T-RAX 7.3.2 (snapshot.cgi) Stream Disclosure
Teradek T-RAX 7.3.2 snapshot.cgi Stream Disclosure Vendor: Teradek, LLC Product web page: https://www.teradek.com Affected version: Firmware Version: 7.3.2 build 24453 Teradek Firmware Version 7.3.15 Summary: T-RAX is a high-density enterprise-grade H.264 platform that encodes, decodes, and strea...
RTSP bad headers buffer over-read
curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded content. When servers send RTSP responses back to curl, the data starts out with a set of headers. curl parses that data to separate it into a number of headers to deal with those appropriately an...
Hardcoded credentials
Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...
CVE-2018-10328
Momentum Axel 720P 5.1.8 devices have a hardcoded password of streaming for the appagent account, which allows remote attackers to view the RTSP video stream...
streaming-beurette.net XSS vulnerability
Open Bug Bounty ID: OBB-606403 Description| Value ---|--- Affected Website:| streaming-beurette.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
streaming-hentai.biz XSS vulnerability
Open Bug Bounty ID: OBB-606404 Description| Value ---|--- Affected Website:| streaming-hentai.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
The vulnerability of the Media Streaming add-on, which handles the transmission of multimedia files, arises from the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.
The vulnerability of the Media Streaming add-on relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands with root privileges remotely...
Streaming site 123movies has been shut down; here are its alternatives
By Waqas On March 19th, the world's most popular pirate streaming website 123movies This is a post from HackRead.com Read the original post: Streaming site 123movies has been shut down; here are its alternatives...
Suppressing the Adversary via Threat Hunt Teams
What a brave new world. Global cyber insurgencies continue unabated. Decreasing dwell time is imperative in 2018. In order to achieve this goal, we must embrace the hunt. Every organization should stand up a threat hunt team. The team must be multidisciplinary with experience in e-forensics and...
CVE-2014-2297
Multiple cross-site scripting XSS vulnerabilities in the VideoWhisper Live Streaming Integration plugin 4.29.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to ls/htmlchat.php or 2 bgcolor parameter to ls/index.php. NOTE: vector 1 may overlap...