EUVD-2025-198624

A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-13588 lKinderBueno Streamity Xtream IPTV Player proxy.php server-side request forgery

A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-13588: Server-Side Request Forgery (SSRF)

A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been made public and...

Streamity.tv 代码问题漏洞

Streamity.tv is an advanced IPTV web player by E M Individual Developer. A code issue vulnerability exists in Streamity.tv version 2.8 and earlier, which stems from a misbehavior in the file public/proxy.php and could lead to server-side request forgery...

PT-2025-47889

A vulnerability was found in lKinderBueno Streamity Xtream IPTV Player up to 2.8. The impacted element is an unknown function of the file public/proxy.php. Performing manipulation results in server-side request forgery. The attack can be initiated remotely. The exploit has been made public and...

Cross-site Scripting (XSS)

org.opencastproject:opencast-common is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unfiltered rendering of user-supplied metadata in the paella player, which allows an attacker with write access to inject malicious HTML or JavaScript that executes in viewers’ browsers...

Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

EUVD-2025-37075

Malicious code in epic-web-video-player npm...

EUVD-2025-37082

Malicious code in epic-video-player npm...

Malicious code in epic-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09900ffe788921c8e9cdf667d912841a8032050d94b41701de06248042e30650 The package epic-video-player was found to contain malicious code...

MAL-2025-49211 Malicious code in epic-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09900ffe788921c8e9cdf667d912841a8032050d94b41701de06248042e30650 The package epic-video-player was found to contain malicious code...

EUVD-2025-37059

Malicious code in player-support-tools-ui npm...

MAL-2025-49218 Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

MAL-2025-49234 Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

CVE-2025-62908

Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Podlove Web Player: from n/a through = 5.9.1...

EUVD-2025-36031

Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Podlove Web Player: from n/a through = 5.9.1...

CVE-2025-62908

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-62908

...

CVE-2025-62908

CVE-2025-62908 is associated with a Missing Authorization vulnerability in Podlove Web Player (podlove-web-player), allowing access to functionality not properly constrained by ACLs. A Red Hat advisory describes the issue as missing authorization in Podlove Web Player with impact on Podlove Web P...