CVE-2025-68598 WordPress Page Builder: Live Composer plugin <= 2.1.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.1.13...

CVE-2025-68598

CVE-2025-68598 refers to a vulnerability in Live Composer – Free WordPress Website Builder. The connected Wordfence entry details a Stored Cross-Site Scripting (XSS) flaw exploitable via the shortcode dslc_module_posts_output, with exploitation requiring an authenticated user (Contributor+). Affe...

CVE-2025-68598 WordPress Page Builder: Live Composer plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiveComposer Page Builder: Live Composer live-composer-page-builder allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through = 2.0.5...

CVE-2023-53996

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make encdechypercall accept a size instead of npages encdechypercall accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marke...

CVE-2023-53996

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make encdechypercall accept a size instead of npages encdechypercall accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marke...

UBUNTU-CVE-2023-53996

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make encdechypercall accept a size instead of npages encdechypercall accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marke...

CVE-2023-53996 x86/sev: Make enc_dec_hypercall() accept a size instead of npages

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make encdechypercall accept a size instead of npages encdechypercall accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marke...

CVE-2023-53996

CVE-2023-53996 affects the Linux kernel's x86/SEV path where enc_dec_hypercall() incorrectly accepted a page count instead of a size, causing non-page-aligned vaddrs to be misclassified as decrypted during encryption status checks. This could lead to page corruption during live migration due to i...

CVE-2023-53996 x86/sev: Make enc_dec_hypercall() accept a size instead of npages

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make encdechypercall accept a size instead of npages encdechypercall accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marke...

PT-2025-52953

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The enc dec hypercall function accepted a page count instead of a size, requiring callers to round up values. This resulted in incorrect marking of pages as decrypted during live migrati...

PT-2025-53322

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get jpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/get jpeg endpoint without authentication...

PT-2025-53359

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly connect to the RTSP stream using tools like VLC or FFmpeg to view and record thermal camera footage...

PT-2025-53356

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can retrieve video stream images by directly accessing multiple image endpoints like middleImage.jpg, rightimage.jpg, and...

PT-2025-53361

FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without...

Beward N100 安全漏洞

Beward N100 is an IP video codec open source from Beward, Russia. A security vulnerability exists in Beward N100 version M2.1.6.04C014, which stems from a lack of authentication in the video access mechanism and could lead to unauthorized access to live video streams...

PT-2025-53326

Name of the Vulnerable Software and Affected Versions Rifatron 5brid DVR versions HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504 Description The Rifatron 5brid DVR contains a flaw in the animate.cgi script that permits unauthorized access to live video streams. An attacker can leverage th...

WordPress plugin Page Builder: Live Composer 安全漏洞

...

PT-2025-53334

Name of the Vulnerable Software and Affected Versions Beward N100 version M2.1.6.04C014 Description The Beward N100 camera system has a flaw that permits unauthenticated remote access to live video streams. An attacker can obtain the camera’s RTSP stream directly due to missing authentication in...

FLIR AX8 Thermal Camera 安全漏洞

FLIR AX8 Thermal Camera is a monitoring thermal imaging sensor from FLIR, Inc. A security vulnerability exists in the FLIR AX8 Thermal Camera version 1.32.16, which originates from unauthenticated access to RTSP streams and could lead to unauthorized access to live video streams...

iSeeQ Hybrid DVR WH-H4 安全漏洞

The iSeeQ Hybrid DVR WH-H4 is a hybrid digital video recorder from the South Korean company iSeeQ. A security vulnerability exists in the iSeeQ Hybrid DVR WH-H4 version 1.03R, which originates from unauthenticated access to the getjpeg script, which could result in obtaining a live video stream...