firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: Use-after-free in the Audio/Video component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

DahuaLoginBypass

DahuaLoginBypass Chrome 扩展程序，利用漏洞 CVE-2021-33044 在无需认证的情况下登录大华 IP 摄像头及 VTH/VTO（可视对讲）设备。 对于其他设备类型（NVR/DVR/XVR 等），存在 CVE-2021-33045，该漏洞无法通过普通 Web 浏览器利用。 这些漏洞很可能在 2021 年 9 月之后发布的固件中得到修复。 漏洞发现者鸣谢：bashis 安装 从 发布页面 下载 .zip 文件。 1. 将此 zip 包中的文件夹解压到某个位置。 2. 前往 Chrome 的扩展程序页面（ chrome://extensions ）。 3...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

sentrysearch

SentrySearch 语言 / Languages: English · 简体中文 对视频素材做语义检索：输入想找的画面描述，自动得到裁剪好的片段。 !IMPORTANT 官方来源： github.com/ssrajadh/sentrysearch 是 SentrySearch 唯一的官方仓库。其他转载或镜像本项目的网站均与维护者无关，也未获得授权，请始终从本仓库下载。 工作流程： 1. SentrySearch ：在素材里用自然语言或图片找到事件对应片段。 2. SentryMerge ：根据搜索结果，把多路摄像头画面自动剪成一条跟随主体的跨镜视频。 3. SentryBlur...

Deep-Live-Cam

Deep-Live-Cam 2.1.6 只需单击一次且仅需一张图像，即可实现实时换脸和视频深度伪造。 免责声明 这款深度伪造软件旨在成为 AI 生成媒体行业的生产力工具。它可以帮助艺术家为自定义角色制作动画、创建引人入胜的内容，甚至使用模型进行服装设计。 我们意识到其可能被用于不道德用途，并致力于采取预防措施。内置检查可防止程序处理不当媒体（裸露、露骨内容、战争画面等敏感材料）。我们将继续负责任地开发此项目，遵守法律和道德规范。如法律要求，我们可能会关闭项目或添加水印。...

CVE-2025-43400

CVE-2025-43400 Video + mi informe + archivo de crash .pfa...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes 音频泄露：通过 URL 提取（已修复，已获得奖励） 🛡️ 漏洞摘要 在 2025年5月，我发现 Instagram Web 中存在一个漏洞，允许任何用户从 Note 中提取原始视频文件 并获取背景音频 ，而这些内容本不应公开。这绕过了 Notes 功能的隐私模型——该模型下视频应当静默显示。 ⚠️ 本漏洞已负责任地披露、验证并修复 。 我通过 Meta 的漏洞赏金计划向其报告了此问题，并因此获得了 $1000 奖励。 案例 ID： 3950957211809485 根本原因可追溯到在某些服务器节点上上传视频 Note...

SymaX5SW-Rx-Tx

SymaX5SW 接收与发射 针对 SYMA X5SW 无人机开展的研究，包含三个明确目标： 1. 拦截无人机的遥测数据，并在图形界面中实时显示。 2. 利用射频、Arduino 模块及 C 代码构建发射器（指令控制器）。 3. 拦截摄像头视频流，并寻找其中的漏洞。 首先，我们将讨论一些射频基础知识、启动此类项目的建议，以及整个过程中遇到的问题。...

CVE-2026-42634

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

EUVD-2026-93056

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

CVE-2026-42634 WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...