Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs

Summary Koel validates the podcast feed URL via the SafeUrl rule DNS resolution + public IP check, but the individual episode values extracted from the RSS XML are stored directly into the database without any SSRF validation. When a user plays an episode, the server downloads the full HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-6780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150. CVE-2026-6780 Note that Nessus relies...

EUVD-2015-5723

Malware in sbrugna...

EUVD-2015-5724

Malware in sbrugna...

EUVD-2017-9433

Malware in sbrugna...

CVE-2024-38416

Information disclosure during audio playback...

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-36047 · Unknown · Dash Module

Name of the Vulnerable Software and Affected Versions: DASH module affected versions not specified Description: The issue is related to an out-of-bounds access vulnerability in the playback functionality of the DASH module. Successful exploitation of this vulnerability will affect availability...

About the security content of Apple TV 1.5.0.152 for Windows

About the security content of Apple TV 1.5.0.152 for Windows This document describes the security content of Apple TV 1.5.0.152 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred...

CVE-2021-21852

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

Mozilla: Use-after-free with video and onresize event (MFSA 2013-46)

Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code via vectors involving an onresize event during the playing of a video...