A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) prior to 1.3.1 allows a remote web server to exfiltrate media files.
readymedia project readymedia
debian debian linux 9.0