119 matches found
EUVD-2026-79005
In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58710
In DecodeFilmGrainParams of filmgraindec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-92356
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the DecodeFilmGrainParams function within the film grain dec.cc file allows for an out-of-bounds write. This condition can be leveraged...
Malicious Package
Overview john-wick-kapitel-4-ganzer-film-auf-deutsch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
ffmpeg:ffmpeg_dem_HEVC_fuzzer: Heap-use-after-free in ff_aom_parse_film_grain_sets
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6155792247226368 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemHEVCfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free READ ...
Photo booth flaw exposes people’s private pictures online
Photo booths are great. You press a button and get instant results. The same can’t be said, allegedly, for the security practices of at least one company operating them. A security researcher spent weeks trying to warn a photo booth operator about a vulnerability in its system. The flaw reportedl...
Photo booth flaw exposes people’s private pictures online
Photo booths are great. You press a button and get instant results. The same can’t be said, allegedly, for the security practices of at least one company operating them. A security researcher spent weeks trying to warn a photo booth operator about a vulnerability in its system. The flaw reportedl...
CVE-2025-13949 ProudMuBai GoFilm FileController.go SingleUpload unrestricted upload
A vulnerability was identified in ProudMuBai GoFilm 1.0.0/1.0.1. Impacted is the function SingleUpload of the file /server/controller/FileController.go. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and...
A message from Bruce the mechanical shark
Welcome to this week's edition of the Threat Source newsletter. Hi, I'm Bruce, the 25-foot mechanical star of "Jaws." This summer marks 50 years since my 4 minutes of screentime kept people out of the water for decades. Maybe this Fourth of July weekend you're planning to sea-shanty your way to a...
The Real Story of “The Order”
The new film about an FBI agent chasing a white supremacist terror cell is based on a true story—and one that connects the headlines of 40 years ago to those of today...
ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Use-of-uninitialized-value in ff_h274_apply_film_grain
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5517722610368512 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Malicious code in john-wick-kapitel-4-ganzer-film-auf-deutsch (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2562 Malicious code in john-wick-kapitel-4-ganzer-film-auf-deutsch (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in j-o-h-n-wick-4-pelicula-completa-en-espanol-latino-6-k (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 6.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1688 Malicious code in -john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-tarabi-lliena- (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in -accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena- (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in -accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-allah-varindo-en-casa-lliena- (npm)
--- -= Per source details. Do not edit below this line.=-...
calgaryundergroundfilm.org Cross Site Scripting vulnerability OBB-3932909
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
luxx-film.com Cross Site Scripting vulnerability OBB-3908349
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...