EUVD-2020-27928

Malware in sbrugna...

CVE-2021-22325

Technical details (affected product/component, root cause, exact impact, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2021-22325

There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may result in video streams being intercepted during transmission...

华为智能手机信息泄露漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause interception of video streams during transmission...

CVE-2020-6781

Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a man-in-the-middle attack...

Input validation

Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a man-in-the-middle attack...

CVE-2020-6781

CVE-2020-6781 affects the Bosch Smart Home System App for iOS prior to version 9.17.1, where improper certificate validation in certain connections could allow an attacker to perform a man-in-the-middle attack and intercept video contents. Root cause: insufficient validation of TLS certificates i...

Debian DSA-2169-1 : telepathy-gabble - insufficient input validation

It was discovered that telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, is processing google:jingleinfo updates without validating their origin. This may allow an attacker to trick telepathy-gabble into relaying streamed media data through a server of his choice a...

Opera < 10.63 Multiple Vulnerabilities

The version of Opera installed on the remote host is prior to 10.63. It is, therefore, affected by the multiple vulnerabilities : - It is possible to bypass cross-domain checks and allow partial data theft by using CSS. 971 - It is possible to spoof the page address by modifying the size of the...

Private video streams can be intercepted

Video content may be used as filler content for a HTML5 canvas, if the video format is natively supported by Opera. If the video and page are from the same site, the content of the canvas can be safely read out by scripts. In some cases, Opera does not check the video's origin correctly, and may...