Mozilla Firefox ESR < 140.15

The version of Firefox ESR installed on the remote Windows host is prior to 140.15. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-84 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbi...

Mozilla Firefox ESR < 115.40

The version of Firefox ESR installed on the remote Windows host is prior to 115.40. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-83 advisory. - Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbi...

The vulnerability of the Video component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Video component in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...

Linux Distros Unpatched Vulnerability : CVE-2026-38343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a...

C-MOR 6.0104 Cross Site Scripting

C-MOR Video Surveillance versions 6.0104 and below suffer from a cross site scripting vulnerability. Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link:...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

Linux Distros Unpatched Vulnerability : CVE-2026-38346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

Linux Distros Unpatched Vulnerability : CVE-2026-38344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

C-MOR 6.0104 - Cross-Site Scripting (XSS)

Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link: https://www.c-mor.com/ Version: = 6.0104 Tested on: C-MOR Video Surveillance V6.0104 CVE: CVE-2026-51133 1...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

SUSE CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

SUSE CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

Chromium: CVE-2026-78969 Uninitialized resource in Video

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

WordPress Slider Hero with Video Background, Animation plugin < 9.1.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Slider Hero versions 9.1.3...