CVE-2025-26752
published 2025-02-25CVE-2025-26752: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video…
PriorityP347high8.6CVSS 3.1
AVNACLPRNUINSCCNINAH
EPSS
0.50%
39.0th percentile
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| videowhisper | broadcast_live_video | <= 6.2 | — |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vh93-mv5g-532c: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper VideoWhisper Live Streaming Integration a
ghsa_unreviewed·2025-02-25
CVE-2025-26752 [HIGH] CWE-22 GHSA-vh93-mv5g-532c: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper VideoWhisper Live Streaming Integration a
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper VideoWhisper Live Streaming Integration allows Path Traversal. This issue affects VideoWhisper Live Streaming Integration: from n/a through 6.2.
Red Hat
gimp: GIMP ICO File Parsing Integer Overflow
vendor_redhat·2025-06-06·CVSS 8.8
CVE-2025-5473 [HIGH] CWE-190 gimp: GIMP ICO File Parsing Integer Overflow
gimp: GIMP ICO File Parsing Integer Overflow
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26752.
An integer overflow vulnerability was found in Gimp's handling of ICO files. This vulnerability can lead to code execution
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-02-25
Published