Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIGDMAAPIDEBUG enabled, the kernel occasionally reports a segment size mismatch. This is because ‘maxsegsize’ is not set. The kernel defaul...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity reports a potential buffer overflow issue. However, given the ‘static’ scope of nvidiasetupi2cbus, it seems that this issue cannot occur after examining the...

Astra Linux – Vulnerability in liblivemedia

Live555 before 2019.08.16 has a Use-After-Free issue, as GenericMediaServer::createNewClientSessionWithId can generate the same client session ID consecutively. This issue is handled improperly by the MPEG1or2 and Matroska file demultiplexors...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy. For some reason, the driver that added support for the Exynos5420 MIPI phy back in 2016 was not applied to the Exynos5420 device, resulting in a kernel panic...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the putepel16fallback in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack using a specially crafted video file...

XM_ONVIF_auth_bypass

CVE-2025-65856 - Omisión de autenticación ONVIF en cámaras IP XM 530 Código de prueba de concepto Bash y Python para CVE-2025-65856 donde la implementación ONVIF en cámaras IP Xiongmai XM530 permite el acceso no autenticado a información sensible del dispositivo y a transmisiones de video en vivo...

CVE-2026-103335

Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...

EUVD-2026-92313

Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...

CVE-2026-103335

The Video Conferencing with Zoom plugin for WordPress (by Deepen Bajracharya) is vulnerable to a Sensitive Data Exposure issue in versions up to and including 4.6.10 . The vulnerability, classified as CWE-201 , allows for the retrieval of embedded sensitive data from the video-conferencing-with-z...

CVE-2026-103335 WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...

WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.10...

TempestSDR

TempestSDR Este proyecto es un conjunto de herramientas de software para espiar de forma remota monitores de vídeo mediante un receptor de radio definida por software SDR. Aprovecha las emanaciones comprometedoras de los cables que transportan señales de vídeo. El vídeo rasterizado normalmente se...

Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Módulo de Metasploit para el sistema de "gestión de video" Geutebrueck GCore. Probado con las versiones 1.3.8.42 y 1.4.2.37. Ejecución remota de código completa con privilegios de NT/System en Windows Win 2012R2, Win8.1, ... con los productos Geutebrueck instalados GCore...

TempestSDR

TempestSDR Este proyecto es un kit de herramientas de software para espiar remotamente monitores de video mediante un receptor de Radio Definida por Software SDR. Aprovecha las emanaciones comprometedoras de los cables que transportan señales de video. El video rasterizado generalmente se transmi...

CVE-2026-10104-POC

CVE-2026-10104：Product Video Gallery for WooCommerce 存储型跨站脚本漏洞 摘要 详情| 值 ---|--- CVE 编号| CVE-2026-10104 插件| Product Video Gallery for WooCommerce 供应商| TechnoSoft Webs NikHiL Gadhiya 类型| 存储型跨站脚本（Stored Cross-Site Scripting, XSS） CWE| CWE-79 — 网页生成过程中输入未充分中和 CVSS 3.1| 4.4（中危） 受影响版本| ≤ 1.5.1.6 修复版本|...

unknownpwn.github.io

Tecnovision LED Video Wall Vulnerabilities and Exploits. From SQLi to full root access. Introducción: Tecnovision es un fabricante de Video Walls LED utilizados en estadios por ejemplo, Twickenham Stadium, salas de conciertos, centros comerciales, señales de tráfico y mucho más. DlxSpot Player 4 ...

CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

EUVD-2026-92206

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...