RSS   Vulnerabilities for 'Readymedia'   RSS

2022-03-06
 
CVE-2022-26505

CWE-290
 

 
A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.

 
2020-11-30
 
CVE-2020-28926

CWE-120
 

 
ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

 


Copyright 2024, cxsecurity.com

 

Back to Top