Streambert
Monthly
Local arbitrary binary execution in Streambert, a cross-platform Electron desktop app for streaming and downloading video, affects all versions prior to 2.5.0 because the 'run-download' IPC handler fails to validate executable paths it receives. A renderer process that has already been compromised can invoke this handler to launch any local binary with the application's privileges, effectively escaping the renderer sandbox into full host code execution. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; it was reported through GitHub (advisory GHSA-x267-77m6-qjc9) and fixed in version 2.5.0.
Remote code execution in Streambert (Electron desktop streaming/download app) versions before 2.5.0 lets a compromised renderer process coerce the trusted main process into fetching and executing an arbitrary binary through an unvalidated auto-updater URL. Any attacker who first gains control of the renderer - for example via malicious streamed web content or an XSS-style flaw - can escalate that foothold into full code execution on the host. Fixed in 2.5.0; no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Arbitrary file write in Streambert Electron desktop app (versions ≤2.4.0) allows remote attackers to drop files anywhere the app process can write by serving a malicious subtitle ZIP archive. The subtitle extraction routine concatenates raw archive entry names to the destination path without sanitization, enabling classic Zip Slip path traversal that can be escalated to code execution by overwriting startup or configuration files. No public exploit identified at time of analysis, but the upstream advisory (GHSA-3q2x-3q9p-qwfc) and fix in v2.5.0 confirm the issue.
Local arbitrary binary execution in Streambert, a cross-platform Electron desktop app for streaming and downloading video, affects all versions prior to 2.5.0 because the 'run-download' IPC handler fails to validate executable paths it receives. A renderer process that has already been compromised can invoke this handler to launch any local binary with the application's privileges, effectively escaping the renderer sandbox into full host code execution. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; it was reported through GitHub (advisory GHSA-x267-77m6-qjc9) and fixed in version 2.5.0.
Remote code execution in Streambert (Electron desktop streaming/download app) versions before 2.5.0 lets a compromised renderer process coerce the trusted main process into fetching and executing an arbitrary binary through an unvalidated auto-updater URL. Any attacker who first gains control of the renderer - for example via malicious streamed web content or an XSS-style flaw - can escalate that foothold into full code execution on the host. Fixed in 2.5.0; no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Arbitrary file write in Streambert Electron desktop app (versions ≤2.4.0) allows remote attackers to drop files anywhere the app process can write by serving a malicious subtitle ZIP archive. The subtitle extraction routine concatenates raw archive entry names to the destination path without sanitization, enabling classic Zip Slip path traversal that can be escalated to code execution by overwriting startup or configuration files. No public exploit identified at time of analysis, but the upstream advisory (GHSA-3q2x-3q9p-qwfc) and fix in v2.5.0 confirm the issue.