Lucene search
K

3164 matches found

0day.today
0day.today
added 2019/10/30 12:0 a.m.65 views

Linux/x86 - (NOT|ROT+8 Encoded) execve(/bin/sh) null-free Shellcode (47 bytes)

Title: Linux/x86 NOT|ROT+8 Encoded execve/bin/sh null-free Shellcode 47 bytes Author: Daniel Ortiz Date: 2019-10-30 Tested on: Linux 4.18.0-25-generic 26 Ubuntu Size: 47 bytes SLAE ID: PA-9844 ----------------------- execve ------------------------------------------------ global start section .te...

7.4AI score
Exploits0
CNVD
CNVD
added 2019/10/28 12:0 a.m.1 views

YouPHPTube Encoder Operating System Command Injection Vulnerability

YouPHPTube is a PHP-based video website system.YouPHPTube Encoder is one of the encoders. An operating system command injection vulnerability exists in YouPHPTube Encoder version 2.3. The vulnerability arises from a network system or product not properly filtering special characters, commands, et...

10CVSS8AI score0.9306EPSS
Exploits1References1
NVD
NVD
added 2019/10/25 6:15 p.m.14 views

CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.9306EPSS
Exploits1References1
OSV
OSV
added 2019/10/25 6:15 p.m.2 views

CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

9.8CVSS7.2AI score
Exploits0References1
OSV
OSV
added 2019/10/25 6:15 p.m.2 views

CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

9.8CVSS7.2AI score
Exploits0References1
OSV
OSV
added 2019/10/25 6:15 p.m.1 views

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2019/10/25 6:15 p.m.17 views

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.93982EPSS
Exploits1References1
NVD
NVD
added 2019/10/25 6:15 p.m.16 views

CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.9306EPSS
Exploits1References1
Prion
Prion
added 2019/10/25 6:15 p.m.20 views

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

7.5CVSS9.7AI score0.93982EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2019/10/25 6:15 p.m.14 views

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

7.5CVSS9.7AI score0.9306EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2019/10/25 6:15 p.m.18 views

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

7.5CVSS9.7AI score0.9306EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/10/25 5:12 p.m.177 views

CVE-2019-5129

CVE-2019-5129 affects YouPHPTube Encoder 2.3 (plugin for encoder functionality). It enables unauthenticated command injections via the base64Url parameter in /objects/getSpiritsFromVideo.php, potentially leading to full server compromise. TALOS and NVD summary indicate unauthenticated, remote com...

10CVSS9.7AI score0.9306EPSS
In wildExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/25 5:12 p.m.17 views

CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.9306EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/10/25 5:12 p.m.19 views

CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.9306EPSS
Exploits1References1
CVE
CVE
added 2019/10/25 5:12 p.m.181 views

CVE-2019-5128

CVE-2019-5128 affects YouPHPTube Encoder (v2.3) with unauthenticated command injection via the base64Url parameter in /objects/getImageMP4.php, enabling remote code execution and potential full server compromise. Multiple connected sources (Talos, Nuclei templates, and CNVD/Red Hat/NVD entries) c...

10CVSS9.7AI score0.9306EPSS
In wildExploits1References1Affected Software1
CVE
CVE
added 2019/10/25 5:12 p.m.185 views

CVE-2019-5127

YouPHPTube Encoder 2.3 is vulnerable to unauthenticated command injections via the base64Url parameter in /objects/getImage.php (also seen in related endpoints such as getImageMP4.php and getSpiritsFromVideo.php). Exploitation can lead to remote code execution and full server compromise. The TALO...

10CVSS9.7AI score0.93982EPSS
In wildExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/25 5:12 p.m.19 views

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

10CVSS9.8AI score0.93982EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/23 12:0 a.m.1 views

Adobe Media Encoder Out-of-Bounds Read Information Disclosure Vulnerability

Adobe Media Encoder is a video and audio encoding application. An out-of-bounds read information disclosure vulnerability exists in the parsing of MOV files in versions prior to Adobe Media Encoder 13.1.5. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker...

6.6AI score
Exploits0References1
CNVD
CNVD
added 2019/10/23 12:0 a.m.0 views

Adobe Media Encoder Out-of-Bounds Read Information Disclosure Vulnerability (CNVD-2019-39590)

Adobe Media Encoder is a video and audio encoding application. An out-of-bounds read information disclosure vulnerability exists in the parsing of MPG files in Adobe Media Encoder versions prior to 13.1.5. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker...

6.5AI score
Exploits0References1
CNVD
CNVD
added 2019/10/23 12:0 a.m.1 views

Adobe Media Encoder Out-of-Bounds Read Information Disclosure Vulnerability (CNVD-2019-39591)

Adobe Media Encoder is a video and audio encoding application. An out-of-bounds read information disclosure vulnerability exists in the parsing of MP4 files in versions prior to Adobe Media Encoder 13.1.5. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker...

6.6AI score
Exploits0References1
Rows per page
Query Builder