CVE-2026-9125

creationtimestamp| type| source ---|---|--- 2026-06-12 19:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo4hbjlgnz27...

CVE-2026-9125 The Ultimate Video Player For WordPress <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link_url' Shortcode Attribute

The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkurl' parameter of the prestoplayeroverlay shortcode in versions up to, and including, 4.2.0 This is due to insufficient input sanitization and output escaping in the getOverlays function, which copies...

EUVD-2025-9125

Malicious code in bioql PyPI...

CVE-2024-9125

The kingIE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject...

CVE-2024-9125

creationtimestamp| type| source ---|---|--- 2024-09-26 12:57:25+00:00| seen| https://t.me/cvedetector/6400...

CVE-2024-9125 king_IE <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The kingIE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject...

WordPress king_IE Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software kingIE Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9125 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a205228c7192 Credits Francesco Carlucci Required privilege...

CVE-2015-9125

CVE-2015-9125 entry is rejected/not used; it does not represent an active vulnerability.

CVE-2015-9125

...

CVE-2020-9125

CVE-2020-9125 concerns Huawei Mate 30 devices prior to version 10.1.0.156 (C00E155R7P2). The issue is an out-of-bounds read caused by insufficient validation of a parameter in a crafted packet, allowing an attacker with certain permissions to trigger abnormal device behavior. Affected software: H...

Ubuntu 16.04 LTS : libquicktime vulnerabilities (USN-4545-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4545-1 advisory. It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a...

USN-4545-1: libquicktime vulnerabilities

It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause a denial of service resource exhaustion. CVE-2017-9122 It was discovered that libquicktime...

CVE-2019-9125

CVE-2019-9125 affects D-Link DIR-878 (firmware 1.12B01). The root cause is misuse of strncpy causing a stack-based buffer overflow that can be exploited remotely without authentication via HNAP_AUTH. Documentation consistently notes impact to confidentiality, integrity, and availability. Public d...

Debian DLA-1042-1 : libquicktime security update

CVE-2017-9122 The quicktimereadmoov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a crafted mp4 file. CVE-2017-9123 The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers t...

Updated libquicktime packages fix security vulnerabilities

A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed CVE-2017-9122. An invalid memory read in lqtframeduration via a crafted mp4 file was fixed CVE-2017-9123. A NULL pointer dereference in quicktimematch32 via a crafted mp4 file was fixed CVE-2017-9124. A DoS in...

SUSE SLED12 / SLES12 Security Update : libquicktime (SUSE-SU-2017:1769-1)

This update for libquicktime fixes the following issues : - CVE-2017-9122: A DoS in quicktimereadmoov function in moov.c via acrafted mp4 file was fixed. bsc1044077 - CVE-2017-9123: An invalid memory read in lqtframeduration via a crafted mp4 file was fixed. bsc1044009 - CVE-2017-9124: A NULL...

CVE-2017-9125

The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mp4 file...

CVE-2017-9125

The lqtframeduration function in lqtquicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mp4 file...

CVE-2017-9125

CVE-2017-9125 affects libquicktime 1.2.4, where the function lqt_frame_duration in lqt_quicktime.c can be exploited by a crafted MP4 file to cause a remote DoS via a heap-based buffer over-read. Exploitation details are confirmed across multiple vendor advisories (Debian DLA-1042-1, openSUSE open...

CVE-2016-9125

The CVE-2016-9125 entry concerns Revive Adserver prior to version 3.2.3, where a session- fixation flaw allows an attacker to force arbitrary session identifiers while the system does not invalidate an existing session after a successful login. This gap enables potential theft of an authenticated...