Skip to content
OpenAdvisories

Vendor

steveseguin

2 known vulnerabilities.

Products

vdo.ninja 1 electroncapture 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-62613

    VDO.Ninja Reflected XSS Vulnerability in control.html

    VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC. From versions 28.0 to before 28.4, a reflected Cross-Site Scripting (XSS) vulnerability exists on examples/control.html through the room parameter, which is impro…

    steveseguin vdo.ninja
  • Medium 5.5
    CVE-2025-54871

    Electron Capture is Vulnerable to TCC Bypass via Misconfigured Node Fuses (macOS)

    Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRON_RUN_AS_NODE. This environment variab…

    steveseguin electroncapture