https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 16:45:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-332211 EUVD-2026-332211 https://cve.radiocsirt.org/vuln/euvd-2026-332211 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13125 <p>GeoWebPlayer (also called &#34;Web Plugin&#34; in the GV-VMS documentation and &#34;WS Player&#34; for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.</p> <p>In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it&#39;s possible to call a combination of the `create` method and `getScreenCapture` to retrieve the content of the user&#39;s screen.</p> <p>GeoWebPlayer (also called &#34;Web Plugin&#34; in the GV-VMS documentation and &#34;WS Player&#34; for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.</p> <p>In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it&#39;s possible to call a combination of the `create` method and `getScreenCapture` to retrieve the content of the user&#39;s screen.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13125 https://cve.radiocsirt.org/vuln/ghsa-8728-ccm5-wcj7 <p>GeoWebPlayer (also called &#34;Web Plugin&#34; in the GV-VMS documentation and &#34;WS Player&#34; for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.</p> <p>In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it&#39;s possible to call a combination of the `create` method and `getScreenCapture` to retrieve the content of the user&#39;s screen.</p> <p>GeoWebPlayer (also called &#34;Web Plugin&#34; in the GV-VMS documentation and &#34;WS Player&#34; for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.</p> <p>In order to access the websocket server, no authentication is required. As such, any malicious website can attempt to open a connection to the server and potentially access sensitive APIs. In particular, it&#39;s possible to call a combination of the `create` method and `getScreenCapture` to retrieve the content of the user&#39;s screen.</p> https://cve.radiocsirt.org/vuln/ghsa-8728-ccm5-wcj7