twint-utils

twint-utils These are utilizations of Twint. Please check out our collaboration guidelines to contribute to these. Mutuals Detector Mufos.py uses Twint to detect a given seed accounts mutual followers. It can be incorporated into other more elaborate pipelines for social networks or millieu...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Beets vulnerability (USN-8747-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8747-1 advisory. It was discovered that Beets incorrectly escaped untrusted media metadata in its web interface. An attacker could...

PT-2026-90510

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

Easy Media Replace 0.2.0 Cross Site Scripting

Easy Media Replace version 0.2.0 and below suffer from a persistent cross site scripting vulnerability. https://packetstorm.news/download/231132...

CVE-2026-79394

Xiongmai IP Camera XM530 (firmware HMT.CM2005-v220608.1837 and earlier ) ships with an insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon . Authentication is disabled by default, allowing remote unauthenticated attackers to access live H.264 video and...

PT-2026-90008

Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This issue affects Website Template: through 11092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

OPENSUSE-SU-2026:11754-1 perl-DBI-1.653.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2026-76190

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...

PT-2026-90546

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

HyperOS-Directory-Traversal-Analysis

🔬 CVE-2025-21082: HyperOS AVCodec Use-After-Free Comprehensive Analysis of the Use-After-Free Vulnerability in Xiaomi HyperOS AVCodec Media Framework and Simulation with Rust...

CVE-2026-79724

creationtimestamp| type| source ---|---|--- 2026-09-10 23:00:12+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv75qyetcx2t 2026-09-11 00:08:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv7bkilkun2j...

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

Unbounded Remote Media Fetch and Video Frame Expansion DoS Summary The POST /v1/chat/completions endpoint in mistral.rs fetches attacker-supplied media URLs image, audio, video into server memory with no byte limit, and extracts every frame of a supplied video when numframes is None. An...

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files a file:// URL, or any existing relative/absolute path. A remote, unauthenticated client of any vision/audio deployment can cause the server to issue requests to internal ...

CVE-2026-89094

creationtimestamp| type| source ---|---|--- 2026-09-10 21:42:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117248919367381106 2026-09-10 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72urrr3j2t 2026-09-10 22:20:07+00:00| seen|...

CVE-2026-89086

creationtimestamp| type| source ---|---|--- 2026-09-10 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6x2w74gh24 2026-09-10 22:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv72tzbqc522 2026-09-10 22:20:04+00:00| seen|...

CVE-2021-29447

CVE-2021-29447 - WordPress XXE Vulnerability Exploit Descripcion Este repositorio contiene un exploit para CVE-2021-29447, una vulnerabilidad de XXE XML External Entity presente en WordPress 5.7.0 y versiones anteriores. La vulnerabilidad existe en la biblioteca medemblic que procesa archivos WAV...

CVE-2026-65638

creationtimestamp| type| source ---|---|--- 2026-09-10 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6mgkkl3b2j 2026-09-10 18:08:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6ni7alcf2n 2026-09-10 18:08:55+00:00| seen|...

CVE-2026-88044

creationtimestamp| type| source ---|---|--- 2026-09-10 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6luoo7m722 2026-09-10 18:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzj75ih2s 2026-09-10 18:09:31+00:00| seen|...

CERTFR-2026-ALE-010

creationtimestamp| type| source ---|---|--- 2026-09-10 16:04:28+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117247591357513667 2026-09-11 05:56:55+00:00| seen| https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p 2026-09-12 05:59:52+00:00| seen|...

USN-8747-1 beets vulnerability

It was discovered that Beets incorrectly escaped untrusted media metadata in its web interface. An attacker could possibly use this issue to inject arbitrary HTML or execute arbitrary JavaScript code in a user's browser...