EUVD-2026-54999

All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by ?vdl= on any aiovgvideos post public/video.php, AIOVGPublicVideo::downloadvideo, which reads the post's mp4 meta value and streams that URL's response back to the requester...

EUVD-2015-6540

Malware in sbrugna...

OSV-2025-618 Heap-buffer-overflow in iTUNTripletCallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437731214 Crash type: Heap-buffer-overflow READ 3 Crash state: iTUNTripletCallback SetupMeta MP4LoadMeta...

New WhatsApp Bug Could Have Let Hackers Secretly Install Spyware On Your Devices

The recent controversies surrounding the WhatsApp hacking haven't yet settled, and the world's most popular messaging platform could be in the choppy waters once again. The Hacker News has learned that last month WhatsApp quietly patched yet another critical vulnerability in its app that could ha...

Mozilla Firefox < 44.0 Multiple Vulnerabilities

Binary data 9075.prm...

Mozilla Firefox MP4 File Parsing Out-of-Bounds Read Vulnerability

Mozilla Firefox is a popular open source WEB browser. Mozilla Firefox parses special metadata in MP4 files with libstagefright stock in out-of-bounds read error, which allows remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can...