CVE-2019-7656

A privilege escalation vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any unprivileged Linux user to escalate privileges to root. The installer sets too relaxed permissions on /usr/local/WowzaStreamingEngine/bin/ core program files. By injecting a payload into one of those files...

PT-2026-2060

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.22 through 2.6.2 Description urllib3 is a Python HTTP client library. Its streaming API is designed for efficient handling of large HTTP responses by reading content in chunks. The library decompresses content based on the...

Medium: python-urllib3

Issue Overview: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage an...

Amazon Linux 2 : python-urllib3, --advisory ALAS2-2025-3110 (ALAS-2025-3110)

The version of python-urllib3 installed on the remote host is prior to 1.25.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3110 advisory. urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number...

PT-2026-23763

Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with the library is required for exploitation, and attack vectors may vary...

PT-2026-6172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the arm64/fpsimd component related to the restoration of SVE context when SME is supported. Restoring SVE signal context can lead to an invalid state,...

Malicious code in @polystream/streaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e62a67308730d0ecc50d157d59a1b39a5786f27c611739f3b02642211d3cda The package @polystream/streaming was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-206047

Malicious code in @polystream/streaming npm...

Malicious Package

Overview @polystream/streaming is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-193009 Malicious code in @polystream/streaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e62a67308730d0ecc50d157d59a1b39a5786f27c611739f3b02642211d3cda The package @polystream/streaming was found to contain malicious code. Source: ghsa-malware...

WordPress WooCommerce HSS Extension for Streaming Video plugin <= 3.31 - Reflected Cross-Site Scripting via videolink Parameter vulnerability

Reflected Cross-Site Scripting via videolink Parameter vulnerability discovered by vgo0 in WordPress Plugin WooCommerce HSS Extension for Streaming Video versions = 3.31...

CVE-2025-60458

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

Exploit for CVE-2025-60458

CVE-2025-60458 UxPlay 1.72 RTSP TEARDOWN Double Free Vulnera...

Vulnerabilities of the functions mxc_isi_m2m_vb2_buffer_queue(), mxc_isi_m2m_vb2_stop_streaming(), and mxc_isi_m2m_s_fmt_vid() in the Linux operating system, which allow a hacker to trigger a service failure.

The vulnerabilities of the functions mxcisim2mvb2bufferqueue, mxcisim2mvb2stopstreaming, and mxcisim2msfmtvid in the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2025-60458

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

UxPlay 安全漏洞

UxPlay is an AirPlay server software by antimof individual developers. A security vulnerability exists in UxPlay version 1.72, which stems from the presence of a double release for RTSP request processing, which could lead to a denial of service...

PT-2025-53726

Name of the Vulnerable Software and Affected Versions UxPlay versions prior to 1.73.3 Description UxPlay is affected by a double free issue in the handling of RTSP requests. A crafted RTSP TEARDOWN request can cause multiple calls to the free function on the same memory location, potentially...

CVE-2025-60458

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free on the same memory address, potentially causing a Denial of Service...

Linux Distros Unpatched Vulnerability : CVE-2022-50757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: camss: Clean up received buffers on failed start of streaming It is required to return the received buffers, if streaming can not be started. For instanc...

CVE-2025-68521

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through = 4.9.5...