CVE-2025-60787-POC

CVE-2025-60787 - motionEye Authenticated RCE Authenticated Remote Code Execution in motionEye = 0.43.1b4 via unsanitized motion config parameter Author: d3vn0mi Vulnerability Overview Field| Details ---|--- CVE ID| CVE-2025-60787 CVSS Score| 7.2 High Type| OS Command Injection CWE-78 Affected|...

espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 OS Command Injection A proof-of-concept exploit OS Command Injection for vulnerability in motionEye, a web frontend for the motion daemon. The vulnerability abuses the imagefilename configuration parameter, which is passed directly to the shell...

SUSE CVE-2026-125069

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

Linux Distros Unpatched Vulnerability : CVE-2026-125069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers...

UBUNTU-CVE-2026-125069

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125069

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125069 FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels Decoder

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125069

Versions of FFmpeg through 9.0.2 are vulnerable to a NULL pointer dereference within the Motion Pixels decoder . The root cause is that the mp_decode_frame() function fails to properly handle errors from init_get_bits(). An attacker can exploit this by providing a packet of approximately 2^28 byt...

EUVD-2026-120244

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125069 FFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels Decoder

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

CVE-2026-125069: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because…

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mpdecodeframe ignores initgetbits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash the...

PT-2026-140983

FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mp decode frame ignores init get bits failure. Attackers supplying a roughly 2^28-byte packet through the libavcodec API overflow the bit count, causing reads from a NULL buffer that crash...

PT-2026-141060

FFmpeg through 9.0.2 contains a division by zero vulnerability in estimate motion b in libavcodec/motion est.c, caused by frame timestamp distances truncated to 16 bits. Attackers can supply input with timestamp gaps that are multiples of 65536, crashing MPEG-4 Part 2 or MPEG-1/2 B-frame encoding...

Malware in tw-motion-css

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview tw-motion-css is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @utilitycraft/tailwindcss-motion-atelier

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18468 Malicious code in @utilitycraft/tailwindcss-motion-atelier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c599649d975de035ad90c3e00aaa44e013bbac939a4c20e545b8c9669a7ea7ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...