CVE-2025-10952 geyang ml-logger File server.py stream_handler information disclosure

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function streamhandler of the file mllogger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure...

CVE-2025-10952 geyang ml-logger File server.py stream_handler information disclosure

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function streamhandler of the file mllogger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure...

CVE-2025-10952

The CVE-2025-10952 entry concerns geyang ml-logger (ml_logger/server.py, stream_handler). The vulnerability arises from manipulation of the key argument in stream_handler, enabling information disclosure through a remote attack. Multiple sources confirm the flaw affects ml-logger and that no vers...

PT-2025-39407

Name of the Vulnerable Software and Affected Versions geyang ml-logger versions prior to acf255bade5be6ad88d90735c8367b28cbe3a743 Description A security flaw exists in geyang ml-logger. The issue resides in the stream handler function within the ml logger/server.py file of the File Handler...

CVE-2020-35460

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations...

Live555 MP3 Stream Handler DoS

The vulnerability of the MP3 Stream Handler component in the Live555 multimedia streaming library lies in its ability to read data from buffers beyond acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2025-2556

A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit h...

CVE-2025-2556

CVE-2025-2556 concerns Audi UTR Dashcam 2.0. The vulnerability affects the Video Stream Handler component, where hard-coded credentials enable exploitation within a local network. Public disclosure has occurred. Affected versions: 2.0; mitigations available: upgrade to 2.89 (new customers) or 2.9...

CVE-2025-2556 Audi UTR Dashcam Video Stream hard-coded credentials

A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit h...

CVE-2025-2556: Use of Hard-coded Credentials

A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit h...

PT-2025-12347

Name of the Vulnerable Software and Affected Versions Audi UTR Dashcam version 2.0 Description A vulnerability was found in the Audi UTR Dashcam, affecting an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be...

Audi UTR Dashcam security vulnerabilities

Audi UTR Dashcam is a high performance Audi car recorder from Audi Germany. It is used to accurately videotape and record details during driving. A security vulnerability exists in Audi UTR Dashcam version 2.0, which stems from the use of hard-coded credentials by the Video Stream Handler...

Apache Tomcat HTTP2 Stream Handler DoS

The vulnerability of the HTTP2 Stream Handler component in the Apache Tomcat application server is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2024-40659 · Unknown · Generatedjavaparser

Name of the Vulnerable Software and Affected Versions: GeneratedJavaParser affected versions not specified Description: A security exception crash has been reported. The crash involves the com.github.javaparser.GeneratedJavaParser.Expression class, the java.base/java.lang.String.startsWith method...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5865710123286528 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

SUSE CVE-2007-1581

The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hashupdatefile function via a userspace 1 error or 2 stream handler, which can then be used to destroy and modify internal resources. NOTE: it was later reported that PH...

com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2015-6524 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.1)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2015-6524 Source advisory: OSV:GHSA-23CR-5HR4-RGWV...

com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2015-6524 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.1)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2015-6524 Source advisory: GHSA-23CR-5HR4-RGWV...

com.github.widebase:widebase-stream-handler-cq_2.9.1 (>=0.1.0, <=0.2.2), com.github.widebase:widebase-stream-handler-cq_2.9.2 (>=0.2.3, <=0.3.3) +180 more potentially affected by CVE-2014-3612 via org.apache.activemq:activemq-jaas (>=5.0.0, <=5.10.0)

org.apache.activemq:activemq-jaas MAVEN version =5.0.0, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =0.1.0, =0.2.3, =2.0.0, =2.3.3, =2.5.1 and more Source cves: CVE-2014-3612 Source advisory: GHSA-72M6-23FF-7Q26...

MPXJ path Traversal vulnerability

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations...