99 matches found
Stitch
DISCLAIMER Stitch is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with use o...
bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)
pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...
bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)
pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...
CVE-2026-110645
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
CVE-2026-110645
The Video-stitch software (versions before 2.0.0-beta.1 ) is vulnerable to an OS command injection vulnerability. The root cause is the improper neutralization of shell metacharacters when file names are interpolated unquoted into shell-executed ffmpeg command lines. Attackers who can influence f...
EUVD-2026-101273
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
CVE-2026-110645
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
PT-2026-114087
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
CVE-2026-110645: Improper Neutralization of Special Elements used in an OS Command
Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...
bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)
pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...
bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)
pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...
Effective Pivot Attack Detection Via System and Network Information
Perimeter-based security appliances, such as firewalls or Intrusion Detection Systems, are ineffective against modern attacks that use pivoting, wherein attackers "pivot" traffic through compromised hosts to gain access to additional targets that would otherwise be inaccessible. Due to the...
CVE-2026-73394
Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...
CVE-2026-73394
The WordPress Stitch Express plugin (versions ≤ 1.9.0) has an unauthenticated broken access control flaw exploitable over the network with no credentials (CVSS 7.5, HIGH), allowing unauthorised integrity changes; no patch version or exploit details are provided in the documents.
EUVD-2026-62371
Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...
CVE-2026-73394 WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...
WordPress Stitch Express plugin <= 1.9.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by babyhack@OPCIA in WordPress Plugin Stitch Express versions = 1.9.1...