Stitch

DISCLAIMER Stitch is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with use o...

CVE-2026-110645

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...

EUVD-2026-101273

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...

CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...

CVE-2026-110645 Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()

Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-executed ffmpeg command lines. Attackers who influence file names passed to concat, cut, or merge can inject shell...

CVE-2026-110645

The Video-stitch software (versions before 2.0.0-beta.1 ) is vulnerable to an OS command injection vulnerability. The root cause is the improper neutralization of shell metacharacters when file names are interpolated unquoted into shell-executed ffmpeg command lines. Attackers who can influence f...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-96749 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-96749 Source advisory: OSV:GHSA-V4X9-3549-CRWV...

bigfeta (>=1.1.3, <=1.1.4), bolinette (>=0.6.0, <=0.6.10) +4 more potentially affected by CVE-2026-88029 via pymongo (3.11.1)

pymongo PYPI version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bigfeta =1.1.3, =0.6.0, =0.3.1, =0.166.0, =0.167.0 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

Effective Pivot Attack Detection Via System and Network Information

Perimeter-based security appliances, such as firewalls or Intrusion Detection Systems, are ineffective against modern attacks that use pivoting, wherein attackers "pivot" traffic through compromised hosts to gain access to additional targets that would otherwise be inaccessible. Due to the...

CVE-2026-73394

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

CVE-2026-73394

The WordPress Stitch Express plugin (versions ≤ 1.9.0) has an unauthenticated broken access control flaw exploitable over the network with no credentials (CVSS 7.5, HIGH), allowing unauthorised integrity changes; no patch version or exploit details are provided in the documents.

EUVD-2026-62371

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

CVE-2026-73394 WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

WordPress Stitch Express plugin <= 1.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by babyhack@OPCIA in WordPress Plugin Stitch Express versions = 1.9.1...

PT-2026-78349

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

CVE-2026-73394: Missing Authorization

Unauthenticated Broken Access Control in Stitch Express = 1.9.0 versions...

TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch

ImpactIf the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read.pythonimport tensorflow as tffunc = tf.rawops.DynamicStitchpara='indices': 0xdeadbeef, 405, 519, 758, 1015, 'data': 110.27793884277344, 120.29475402832031,...

PYSEC-2026-3251 Out of bounds segmentation fault due to unequal op inputs in Tensorflow

Impact tf.rawops.DynamicStitch specifies input sizes when it is registered. cpp REGISTEROP"DynamicStitch" .Input"indices: N int32" .Input"data: N T" .Output"merged: T" .Attr"N : int = 1" .Attr"T : type" .SetShapeFnDynamicStitchShapeFunction; When it receives a differing number of inputs, such as...

PYSEC-2026-3376 Out of bounds segmentation fault due to unequal op inputs in Tensorflow

Impact tf.rawops.DynamicStitch specifies input sizes when it is registered. cpp REGISTEROP"DynamicStitch" .Input"indices: N int32" .Input"data: N T" .Output"merged: T" .Attr"N : int = 1" .Attr"T : type" .SetShapeFnDynamicStitchShapeFunction; When it receives a differing number of inputs, such as...

PT-2026-59866

Impact tf.raw ops.DynamicStitch specifies input sizes when it is registered. cpp REGISTER OP"DynamicStitch" .Input"indices: N int32" .Input"data: N T" .Output"merged: T" .Attr"N : int = 1" .Attr"T : type" .SetShapeFnDynamicStitchShapeFunction; When it receives a differing number of inputs, such a...