10834 matches found
PT-2025-11644 · G Net · G-Net Dashcam Bb Gonx
Name of the Vulnerable Software and Affected Versions: G-Net Dashcam BB GONX devices affected versions not specified Description: The issue allows remote access to recorded and live video feeds on the G-Net Dashcam BB GONX devices. It exposes API endpoints on ports 9091 and 9092, enabling an...
CVE-2025-30141
An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all...
CVE-2025-30141
A security vulnerability in G-Net Dashcam BB GONX devices allows for the remote dumping of video footage and live streams. The issue stems from improper access control on API endpoints exposed on ports 9091 and 9092 . An attacker connected to the dashcam's network can retrieve all stored recordin...
Updated php packages fix security vulnerabilities
Bugs and security with streams have been fixed...
MGASA-2025-0100 Updated php packages fix security vulnerabilities
Bugs and security with streams have been fixed...
[SECURITY] Fedora 41 Update: expat-2.7.0-1.fc41
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
The vulnerabilities of the functions php_libxml_input_buffer_create_filename() and php_libxml_sniff_charset_from_stream() in the PHP interpreter allow a hacker to redirect users to any desired URL address.
The vulnerabilities of the functions phplibxmlinputbuffercreatefilename and phplibxmlsniffcharsetfromstream in the PHP interpreter are related to the use of open redirection. Exploiting these vulnerabilities could allow a malicious actor to redirect users to any desired URL address...
[SECURITY] Fedora 42 Update: libxml2-2.12.10-1.fc42
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
[slackware-security] php
New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php81/php81-8.1.32-i586-1slack15.0.txz: Upgraded. This update fixes security issues: LibXML: libxml streams use wrong content-type header when...
sctp: sysctl: auth_enable: avoid using current->nsproxy
...
sctp: sysctl: rto_min/max: avoid using current->nsproxy
...
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
...
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
...
Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
...
firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape...
drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
...
firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape...
The vulnerability of the Media Stream component of the Google Chrome browser, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Media Stream component in the Google Chrome browser relates to the exposure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information via a specially created HTML page...
CVE-2025-21847
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...
DEBIAN-CVE-2025-21847
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...