GHSA-X7MM-9VVV-64W8 unhead: Streaming SSR `streamKey` injected into inline script without identifier validation

Summary createStreamableHead streamKey interpolated its streamKey argument directly into the streaming SSR bootstrap and suspense-chunk inline scripts without identifier validation or escaping. If an application forwards untrusted data into that configuration value, the rendered scripts become a...

CVE-2025-57437

The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC,...

CVE-2025-57437

The CVE-2025-57437 affects Blackmagic Web Presenter HD firmware v3.3. An unauthenticated Telnet service on port 9977 exposes extensive device configuration data, including model, version, unique identifiers, IP/MAC/DNS, current stream platform, stream key, streaming URL, and audio/video settings....