CVE-2025-39714

CVE-2025-39714 affects the Linux kernel media/usbtv subsystem. When streaming (e.g., ffplay) and another process changes TV standard NTSC↔PAL, the kernel could crash by copying to unmapped memory, caused by an overflow in the usbtv video plane buffer due to the struct’s increased resolution not b...

Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm)

The package avatar-the-way-of-water-movie-streaming-edjezkd was found to contain malicious code...

Malicious code in watch-avatar2-free-streaming-2023-jdkzedl (npm)

The package watch-avatar2-free-streaming-2023-jdkzedl was found to contain malicious code...

Malicious code in avatar-the-way-of-water-free-streaming-djzdk (npm)

The package avatar-the-way-of-water-free-streaming-djzdk was found to contain malicious code...

MAL-2025-43548 Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm)

The package avatar-the-way-of-water-movie-streaming-edjezkd was found to contain malicious code...

MAL-2025-46563 Malicious code in watch-avatar2-free-streaming-2023-jdkzedl (npm)

The package watch-avatar2-free-streaming-2023-jdkzedl was found to contain malicious code...

MAL-2025-43547 Malicious code in avatar-the-way-of-water-free-streaming-djzdk (npm)

The package avatar-the-way-of-water-free-streaming-djzdk was found to contain malicious code...

PT-2025-36337

Name of the Vulnerable Software and Affected Versions: fs2 versions 3.12.2 and lower fs2 versions 3.13.0-M1 through 3.13.0-M6 Description: fs2, a compositional, streaming I/O library for Scala, is susceptible to denial of service attacks through TLS sessions when using fs2-io on the JVM with the...

BIT-POWERSHELL-2020-8927 Buffer overflow in Brotli library

A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli...

CVE-2025-38730

In the Linux kernel, the following vulnerability has been resolved: iouring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. iouring deals with this and invalidates them on retry. But on the...

Linux Distros Unpatched Vulnerability : CVE-2023-6603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null...

Linux Distros Unpatched Vulnerability : CVE-2020-6095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst- rtsp-server 1.14.5. A specially crafted RTSP setup...

Linux Distros Unpatched Vulnerability : CVE-2023-6602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS...

Linux Distros Unpatched Vulnerability : CVE-2024-11668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections...

HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands

Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display extortion messages. "A prominent characteristic of the latest variant is its capacity to deploy a full-screen ransomware overlay, which aims t...

Linux Distros Unpatched Vulnerability : CVE-2017-9993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extension...

CVE-2025-6465

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to sanitize file names which allows users with file upload permission to overwrite file attachment thumbnails via path traversal in file streaming APIs...

CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

PT-2025-34462 · Reolink · Reolink Smart 2K+ Plug-In Wi-Fi Video Doorbell

Name of the Vulnerable Software and Affected Versions: Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.4662 2503122283 Description: An incorrect access control issue exists in the RTMP server settings. This allows attackers to cause a Denial of Service DoS by initiating a...