Skip to content
OpenAdvisories

Product · truelockmc

streambert

8 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 10.0

    Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler

    Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the  run-download  IPC handler, allowing a compromised renderer process to execute arbitrary loc…

  • Critical 9.3

    Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler

    Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an…

  • Critical 10.0

    Streambert: Arbitrary File Write (Zip Slip) via Subtitle Extraction

    Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle extraction logic. The application does not sanitize archive…