988 matches found
EUVD-2026-29104
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
CVE-2026-33359
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
CVE-2026-33359
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
CVE-2026-33359 Meari unauthenticated alert image access in cloud object storage
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
CVE-2026-33359 Meari unauthenticated alert image access in cloud object storage
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
CVE-2026-33359: Missing Authorization
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
Meari Alibaba OSS 安全漏洞
Meari Alibaba OSS is an IoT cloud data storage solution developed by Meari Company, which integrates object storage services. There is a security vulnerability in Meari Alibaba OSS. This vulnerability arises from the lack of authentication, signed URLs, and expiration controls in Meari IoT Cloud...
PT-2026-39642
In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...
[SECURITY] Fedora 44 Update: qt6-qtsensors-6.10.3-1.fc44
The Qt Sensors API provides access to sensor hardware via QML and C++ interfaces. The Qt Sensors API also provides a motion gesture recognition API for devices...
libheif:file_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors
Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4930149283069952 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerubsanlibheif Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
motionEye 0.43.1b4 Remote Code Execution
Client-side validation in motionEye's web UI can be bypassed via overriding the JS validation function. Arbitrary values including shell interpolation syntax can be saved into the motion config. When motion is restarted, the motion process interprets the config and can execute shell syntax embedd...
[SECURITY] Fedora 43 Update: envision-3.2.0-7.fc43
UI for building, configuring, and running Monado, the open source OpenXR runtime. This is still highly experimental software, while it's unlikely that anything bad will happen, it's still unstable and there is no guarantee that it will work on your system, with your particular hardware. If you...
Adobe After Effects 资源管理错误漏洞
Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. Adobe After Effects suffers from a resource management error vulnerability...
kimageformats:kimgio_heif_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6224653910867968 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioheiffuzzer Job Type: libfuzzerubsankimageformats Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...
imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in derive_collocated_motion_vectors
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6659568406167552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...
Malicious code in framer-motion-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e5cb35fb0103b934b0b73f1556a3b5a7b83ecb9cd1c627b4c44d4a35d658f3 The package framer-motion-js was found to contain malicious code. Source: ghsa-malware 3ef4e281f7e4f36adf0bb94b56ac5c7c3d34d58b634939eb1cab10906136e9...
EUVD-2026-1974
Malicious code in framer-motion-js npm...
Malicious Package
Overview framer-motion-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-220 Malicious code in framer-motion-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e5cb35fb0103b934b0b73f1556a3b5a7b83ecb9cd1c627b4c44d4a35d658f3 The package framer-motion-js was found to contain malicious code. Source: ghsa-malware 3ef4e281f7e4f36adf0bb94b56ac5c7c3d34d58b634939eb1cab10906136e9...
