Malicious code in electron-purple-player (npm)

The package electron-purple-player was found to contain malicious code...

Malicious code in atg-all-in-wonder-player (npm)

The package atg-all-in-wonder-player was found to contain malicious code...

Malicious code in rn-unacademy-player (npm)

The package rn-unacademy-player was found to contain malicious code...

Malicious code in react-native-chorus-player (npm)

The package react-native-chorus-player was found to contain malicious code...

MAL-2025-18736 Malicious code in dragand-player-plugin (npm)

The package dragand-player-plugin was found to contain malicious code...

MAL-2025-19455 Malicious code in electron-purple-player (npm)

The package electron-purple-player was found to contain malicious code...

MAL-2025-32317 Malicious code in rn-unacademy-player (npm)

The package rn-unacademy-player was found to contain malicious code...

MAL-2025-38359 Malicious code in vidazoo-player-client (npm)

The package vidazoo-player-client was found to contain malicious code...

Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CVE-2012-10031

BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA to extract a filename from a URL-like...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-6797 Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

CVE-2012-10031

BlazeVideo HDTV Player Pro 6.6.0.3 is affected by a stack-based buffer overflow in .plf playlist handling. The MediaPlayerCtrl.dll uses PathFindFileNameA() to extract a filename from a URL-like string and copies it into a fixed-size stack buffer with strcpy without bounds checking, enabling poten...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

Kodi Xbmc 安全漏洞

Kodi Xbmc is a free and open source software media player and digital media entertainment center from the Kodi Foundation in the United States. A security vulnerability exists in Kodi Xbmc version 2012-11-04 and earlier, which stems from the HTTP server not properly cleaning up URI inputs, which...

BlazeVideo HDTV Player Pro 安全漏洞

BlazeVideo HDTV Player Pro is a video player from BlazeVideo USA. A security vulnerability exists in BlazeVideo HDTV Player Pro version v6.6.0.3, which originates from improper handling of .plf file inputs and can lead to a buffer overflow and arbitrary code execution...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

PT-2025-32259 · Undefined · Undefined

CVE-2025-54980 - Adobe Flash Player Arbitrary Command Execution CVE ID : CVE-2025-54980 Published : Aug. 5, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

CVE-2025-50592

CVE-2025-50592 is an XSS vulnerability affecting SeaCMS (“seacms”) prior to version 13.2, exploitable via the vid parameter in Upload/js/player/dmplayer/player. Root cause is cross-site scripting in that input path, with the CVSSv3.1 base score listed as 5.4 (Medium). Affected product: SeaCMS v13...