Malicious code in epic-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09900ffe788921c8e9cdf667d912841a8032050d94b41701de06248042e30650 The package epic-video-player was found to contain malicious code...

MAL-2025-49218 Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

GPU-Backed-Shellcode-Execution-PoC

GPU-Backed Shellcode...

[SECURITY] Fedora 42 Update: qt6-qtmultimedia-6.9.3-1.fc42

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 1 (7.1.0-187)

This update provides important security fixes. Vulnerability id: VSTOR-89294 A fix for volume attachment. Vulnerability id: VSTOR-107377 Failed to move domains to a mount point during an update. Vulnerability id: VSTOR-111693 A stability fix for QEMU. Vulnerability id: VSTOR-115326 Failed to set...

The vulnerabilities in the modules drivers/media/usb/uvc/uvc_driver.c and drivers/media/usb/uvc/uvcvideo.h of the Linux operating system’s UVC driver module allow a hacker to cause a service failure.

The vulnerability in the drivers/media/usb/uvc/uvcdriver.c and drivers/media/usb/uvc/uvcvideo.h files of the UVC driver for the Linux operating system is related to incorrect assignment of identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2025-36541

Reolink Video Doorbell Wi-Fi DB566128M5MPW stores and transmits DDNS credentials in plaintext within its configuration and update scripts, allowing attackers to intercept or extract sensitive information...

CVE-2025-62910

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

PT-2025-44192

Name of the Vulnerable Software and Affected Versions Reolink Video Doorbell Wi-Fi DB 566128M5MP W affected versions not specified Description The Reolink Video Doorbell Wi-Fi DB 566128M5MP W stores and transmits Dynamic DNS DDNS credentials in plaintext within its configuration and update script...

EUVD-2025-36029

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

CVE-2025-62910

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

CVE-2025-62910 WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

CVE-2025-62910 WordPress Video Gallery by Huzzaz plugin <= 10.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

CVE-2025-62910

CVE-2025-62910 describes a Stored XSS in WordPress Video Gallery by Huzzaz plugin (huzzaz-video-gallery) for versions up to 10.5. Root cause: improper neutralization of input during web page generation. Impact per cited metrics: Stored XSS with MEDIUM risk (CVSS v3.1 base 5.4). Status in connecte...

WordPress plugin Video Gallery by Huzzaz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38547)

media: atomisp: sshcss: null-pointer dereference in loadvideobinaries. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503608; scriptversion"1.2";...

PT-2025-43788

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through = 10.5...

Evaluation of Vision-LLMs in Surveillance Video

The widespread use of cameras in our society has created an overwhelming amount of video data, far exceeding the capacity for human monitoring. This presents a critical challenge for public safety and security, as the timely detection of anomalous or criminal events is crucial for effective...

SUSE CVE-2025-23345

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

Cisco Desk/IP/Video Phone Denial of Service (cisco-sa-phone-dos-FPyjLV7A) (CVE-2025-20350)

According to its self-reported version, the remote Cisco Desk, IP, or Video Phone running SIP Software is affected by a denial of service vulnerability: - A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco S...