3583 matches found
CVE-2014-5811
The CVE-2014-5811 entry concerns the ZOOM Cloud Meetings Android app (package us.zoom.videomeetings) version identified as @7F060008, which does not verify X.509 certificates from SSL servers. This flaw enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information via ...
CVE-2014-5811
The ZOOM Cloud Meetings aka us.zoom.videomeetings application @7F060008 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
WordPress DZS Video Gallery XSS / Path Disclosure / Command Execution
Hello list! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
Zoom VoIP Phone Adapater ATA1+1 1.2.5 - CSRF Exploit
No description provided by source. Written By Michael Brooks Special thanks to str0ke! Zoom VoIP Phone Adapater ATA1+1 XSRF voip provider change xsrf version 1.2.5 html form action=http://10.1.1.165/callwzd.html method=post input name=DIRTYPAGE value=3 input name=HELPPAGE value=html.html input...
Zoom Player Pro 3.30 (.m3u) - File Buffer Overflow Exploit (seh)
No description provided by source. ?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original...
Zoom Player 3.30/5/6 Crafted ZPL File Error Message Arbitrary Code Execution
No description provided by source. source: http://www.securityfocus.com/bid/27007/info Zoom Player is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application or to crash the application...
Zoom X4/X5 ADSL Modem - Multiple Vulnerabilities
No description provided by source. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar...
WrenSoft Zoom Search Engine 2.0 Build: 1018 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8823/info WrenSoft Zoom Search Engine is prone to a cross-site scripting issue in the software's search module. A remote attacker may be able to execute HTML or script code in a user's browser. The problem occurs because...
Zoom Telephonics ADSL Modem/Router - Multiple Vulnerabilities
No description provided by source. Five models of the Zoom Telephonics ADSL Modem/Router line suffer from multiple critical vulnerabilities, almost all being of a remote access attack vector. Models affected: Zoom X3 ADSL Modem/Router Zoom X4 ADSL Modem/Router Zoom X5 ADSL Modem/Router Zoom ADSL...
Zoom Media Gallery 2.1.2 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC
No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...
Inmatrix Ltd. Zoom Player 8.5 - (.jpeg) Exploit
No description provided by source. Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit. Version: Zoom Player v8.5 Date: 09-1-2013 Author: Debasish Mandal. Blog : http://www.debasish.in/ Software Link:...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array ReadMakernoteTag = array , getMakernoteTextValue = array , InterpretMakernotetoHTML = array ; // Include th...
Uzbey: SQL injection, time zoom script, tile ID
The tile ID parameter to the tile zoom script is vulnerable to SQL injection. The following will cause the script to run a benchmark, returning an error 8-10 seconds later: https://staging.uzbey.com/zoom-image/BENCHMARK10000000,SHA11...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Digital Zoom Studio DZS Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to 1 preview.swf, 2 previewskinrouge.swf, 3 previewallchars.swf, or 4 previewskinoverlay.swf...
WordPress DZS Video Gallery Cross Site Scripting / Content Spoofing
Hello list! There are Content Spoofing and Cross-Site Scripting vulnerabilities in plugin DZS Video Gallery for WordPress. After I announced multiple vulnerabilities in DZS Video Gallery at 08.05.2014 and informed developers, they ignored it, so the second advisory is going directly to full...
CVE-2013-3259
Stack-based buffer overflow in INMATRIX Zoom Player before 8.7 beta 11 allows remote attackers to execute arbitrary code via a large biClrUsed value in a BMP file...