CLEANSTART-2026-NU09450 Security fixes in nats-streaming 0.24.6-r2

Package nats-streaming version 0.24.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-VW61605 Security fixes in nats-streaming 0.24.6-r3

Package nats-streaming version 0.24.6-r3 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-TN85726 Security fixes in nats-streaming 0.25.6-r4

Package nats-streaming version 0.25.6-r4 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-IF83515 Security fixes in nats-streaming 0.25.6-r3

Package nats-streaming version 0.25.6-r3 fixes 1 vulnerabilities: CVE-2026-42504...

EUVD-2026-50449

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

PT-2026-65943

Name of the Vulnerable Software and Affected Versions Sony XAV-9500ES affected versions not specified Description Network-adjacent attackers can execute arbitrary code on affected devices without authentication. The issue occurs during the handling of SETUP RTSP packets, where the device fails to...

Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave

Between January and June 2026, TrendAI™ tracked more than 35,000 fake sites exploiting the 2026 FIFA World Cup, spanning counterfeit merchandise shops, cloned ticket pages, and bogus free-streaming sites, which together drew roughly 1.48 million visits from Japan...

Security update for python-urllib3

This update for python-urllib3 fixes the following issue CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3397-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli support can lead to a denial of service bsc1268683...

Solve Multi-CDN Entitlement Drift with Edge Functions Without Losing Viewers

...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal Detection

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine 4.""" import re from kittysploit import from...

Icecast Streaming Media Server Detection

Detects Icecast Streaming Media Server Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Icecast Streaming Media Server Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Icecast Streaming Media...

Wowza Streaming Engine Manager Panel - Detect

Wowza Streaming Engine Manager panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Wowza Streaming Engine Manager panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Wowza Streaming Engin...

Redpanda Console - Exposure Detection

Unauthorized access to the Redpanda Console could allow attackers to view or manipulate streaming data, monitor clusters, or access configuration information, leading to potential data leaks or service disruption. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthorized access to the Redpanda...

Icecast Streaming Media Server Information Panel - Detect

Icecast Streaming Media Server information panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Icecast Streaming Media Server information panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name'...

SUSE SLES16 Security Update : python-urllib3 (SUSE-SU-2026:22863-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22863-1 advisory. This update for python-urllib3 fixes the following issue - CVE-2026-9375: decompression bomb bypass in the streaming API when using Brotli...

RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:47069)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47069 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Malicious Package

Overview streaming-downloads is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview here-full-watch-tu-jhoothi-main-makkar-on-fullmovies-online-streaming-at-home is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is ...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Sensitive Information Exposure in LangSmith [CVE-2026-41182]

Summary IBM Watson Speech Services Cartridge is vulnerable to Sensitive Information Exposure in LangSmith, due to an issue that causes a bypass of the redaction pipeline CVE-2026-41182. LangSmith is used in our runtime postprocessor. This vulnerability has been addressed. Please read the details...