MAL-2025-24693 Malicious code in knell-player (npm)

The package knell-player was found to contain malicious code...

Malicious code in vidazoo-player-client (npm)

The package vidazoo-player-client was found to contain malicious code...

Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2012-10031

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-6797 Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2012-10031

BlazeVideo HDTV Player Pro 6.6.0.3 is affected by a stack-based buffer overflow in .plf playlist handling. The MediaPlayerCtrl.dll uses PathFindFileNameA() to extract a filename from a URL-like string and copies it into a fixed-size stack buffer with strcpy without bounds checking, enabling poten...

BlazeVideo HDTV Player Pro 安全漏洞

BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...

PT-2025-32259 · Undefined · Undefined

CVE-2025-54980 - Adobe Flash Player Arbitrary Command Execution CVE ID : CVE-2025-54980 Published : Aug. 5, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

CVE-2025-50592

The seacms web content management system, specifically versions prior to 13.2 , is vulnerable to a Cross-Site Scripting (XSS) issue. The vulnerability is located in the vid parameter within the path Upload/js/player/dmplayer/player. This flaw is caused by the improper neutralization of input duri...

Kodi Xbmc 安全漏洞

Kodi Xbmc is a free and open source software media player and digital media entertainment center from the Kodi Foundation in the United States. A security vulnerability exists in Kodi Xbmc version 2012-11-04 and earlier, which stems from the HTTP server not properly cleaning up URI inputs, which...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2012-10031: Stack-based Buffer Overflow

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2025-50592: Improper Neutralization of Input During Web Page Generation

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

WordPress Voltax Video Player Cross-Site Scripting Vulnerability

WordPress Voltax Video Player is a video plugin for the WordPress platform, developed by Minute Media, which is mainly used to embed videos and playlists from Minute Media's online video platform into WordPress websites. WordPress Voltax Video Player suffers from a cross-site scripting...

SUSE CVE-2015-5564

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

Exploit for Use After Free in Adobe Flash_Player

APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...

Exploit for Use After Free in Adobe Flash_Player

CobaltStrike-Toolset Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on - Kits - ResourceKit - ExploitKit - Aggressor Script - chromedumpmimikatz.cna - nopowershell - SMBexecpsh Further Resources nopowershell smbexecpsh.cna CVE-2018-15982...