CVE-2025-24400: Incorrect Authorization

Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key during signing operations, allowing attackers able to create a credential with the same ID as a legitimate one in a different credentials store to sign an event published to RabbitMQ with...

PT-2025-5358

Name of the Vulnerable Software and Affected Versions Jenkins Eiffel Broadcaster Plugin versions 2.8.0 through 2.10.2 Description The issue allows attackers to create a credential with the same ID as a legitimate one in a different credentials store, enabling them to sign an event published to...

Cache confusion in eiffel-broadcaster

eiffel-broadcaster allows events published to RabbitMQ to be signed using certificate credentials. To improve performance, the plugin caches some data from the credential. eiffel-broadcaster 2.8.0 through 2.10.2 both inclusive uses the credential ID as the cache key. This allows attackers able to...

PT-2025-2206 · Obsproject · Obs Studio

Name of the Vulnerable Software and Affected Versions: obsproject OBS Studio versions up to 30.0.2 Description: A vulnerability has been found in obsproject OBS Studio, affecting an unknown functionality. The manipulation leads to an untrusted search path. The attack needs to be approached locall...

SUSE CVE-2024-22033

The OBS service obs-service-downloadurl was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps...

PT-2024-19167 · Unknown · Obs-Service-Download Url

Name of the Vulnerable Software and Affected Versions: OBS service obs-service-download url affected versions not specified Description: The OBS service obs-service-download url was vulnerable to a command injection issue. An attacker could provide a configuration to the service that allowed...

CVE-2023-45776

In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates in the getNumberFromCallIntent obfuscation agent of the NewOutgoingCallIntentBroadcaster.java component, which can be exploited by an...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

Improper access control

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36866

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

CVE-2022-36866

The CVE-2022-36866 issue affects Samsung’s Broadcaster in Group Sharing prior to versions 13.0.6.15 (Android S 12) and 13.0.6.14 (Android R 11). Root cause: improper access control in Broadcaster allows attackers to identify the device. Affected products and versions are documented in multiple so...

PT-2022-23670 · Google · Android

Name of the Vulnerable Software and Affected Versions: Broadcaster in Group Sharing versions prior to 13.0.6.15 in Android S12 Broadcaster in Group Sharing versions prior to 13.0.6.14 in Android R11 and below Description: The issue is related to improper access control, allowing attackers to...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Android S12 prior to version 13.0.6.15 and Android R11 prior to version 13.0.6.14, which ste...

CVE-2022-36866: Improper Access Control

Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S12, 13.0.6.14 in Android R11 and below allows attackers to identify the device...

Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data

By Waqas The data leaked by the Anonymous affiliate group contains 4,000 files and more than 900,000 emails from Russian… This is a post from HackRead.com Read the original post: Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data...

Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code

Footage of opposition leaders calling for the assassination of Iran’s Supreme Leader ran on several of the nation’s state-run TV channels in late January after a state-sponsored cyber-attack on Iranian state broadcaster IRIB. The incident – one of a series of politically motivated attacks in Iran...

The vulnerability of the VideoBroadcaster module in the Firefox browser’s AddOrUpdateSink function allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the VideoBroadcaster module in the Firefox browser’s AddOrUpdateSink function is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...