Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated streamcount value that could result in a buffer overflow...

CVE-2018-25141: Missing Authentication for Critical Function

FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video streams without credentials. Attackers can directly retrieve video streams by accessing specific endpoints like /live.mjpeg, /snapshot.jpg, and RTSP streaming URLs without...

FLIR Brickstream 3D+ 安全漏洞

The FLIR Brickstream 3D+ is an intelligent streaming analysis sensor from FLIR, Inc. A security vulnerability exists in FLIR Brickstream 3D+ version 2.1.742.1842, which originates from unauthenticated access to a video streaming endpoint and could result in unauthorized access to a live video...

PT-2025-53159

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5 Description The Linux kernel contained a flaw in the unix stream sendpage function where a null pointer dereference could occur. This issue arose from attempting to add data to the last socket buffer skb in t...

iSeeQ Hybrid DVR WH-H4 安全漏洞

The iSeeQ Hybrid DVR WH-H4 is a hybrid digital video recorder from the South Korean company iSeeQ. A security vulnerability exists in the iSeeQ Hybrid DVR WH-H4 version 1.03R, which originates from unauthenticated access to the getjpeg script, which could result in obtaining a live video stream...

FLIR Thermal Traffic Cameras 安全漏洞

FLIR Thermal Traffic Cameras are a line of thermal traffic detection cameras from FLIR, Inc. A security vulnerability exists in the FLIR thermal traffic cameras that originates from unauthenticated access to a specific video streaming endpoint, which could result in unauthorized access to a live...

Malicious code in stream-chain-xor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...

MAL-2025-192864 Malicious code in stream-chain-xor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be18a835c94965458ba487a88b339ad55c26ca1f3e4785daf6dabb6d60dc3903 The package stream-chain-xor was found to contain malicious code...

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

CVE-2025-65857

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

CVE-2025-65857: Exposure of Private Personal Information to an Unauthorized Actor

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access...

Xiongmai XM530 安全漏洞

Xiongmai XM530 is a video surveillance camera from the Chinese company Xiongmai. A security vulnerability exists in the Xiongmai XM530 IP cameras firmware version V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06, which stems from GetStreamUri exposing RTSP URIs containing hard-coded credentials, whi...

CVE-2025-65857

The Xiongmai XM530 IP cameras, specifically on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 , are vulnerable to an issue where the GetStreamUri ONVIF endpoint exposes RTSP URIs containing hardcoded credentials . This flaw allows unauthorized actors to gain direct access to live video st...

Fedora 43 : cef (2025-6e776254bf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6e776254bf advisory. Update to cef-143.0.10+g8aed01b + chromium-143.0.7499.146 rhbz2423482 High CVE-2025-14765: Use after free in WebGPU High CVE-2025-14766: Out of boun...

The vulnerability of the dcn401_stream_encoder_create() function in the drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401_resource.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dcn401streamencodercreate function in the drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401resource.c file of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991279)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991279 advisory. In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's skwq in skstreamwaitmemory Fixes the below NULL pointer...

UPF 安全漏洞

UPF is an open source user interface from the Aether SD-Core Project. A security vulnerability exists in UPF upf-epc-pfcpiface:version 2.1.3-dev, which stems from a buffer out-of-bounds read while processing a PFCP session establishment request containing a malformed stream description, which cou...

AZL-72697 CVE-2025-68114 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...

CVE-2025-68114

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...

CVE-2025-68114

Capstone CVE-2025-68114 affects Capstone 6.0.0-Alpha5 and earlier. The vulnerability arises from an unchecked return value from vsnprintf in SStream_concat, which can drive SStream’s index negative or past the end and cause a stack buffer underflow/overflow on the next write. The issue has a fixe...