Lucene search
+L

57 matches found

Vulnrichment
Vulnrichment
added 2026/01/19 8:09 p.m.18 views

CVE-2026-23837 MyTube has an Authorization Bypass vulnerability

MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddleware. By simply not providing an authentication...

9.8CVSS5.7AI score0.00652EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/19 8:09 p.m.10 views

CVE-2026-23837 MyTube has an Authorization Bypass vulnerability

MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddleware. By simply not providing an authentication...

9.8CVSS5.7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.14 views

MyTube security vulnerability

MyTube is a video self-hosting downloader and player developed by Peifan Li. Versions of MyTube prior to 1.7.71 contained security vulnerabilities. These vulnerabilities stemmed from a flaw that allowed rate limits to be bypassed through the X-Forwarded-For header manipulation. This could enable...

6.5CVSS5.8AI score0.00363EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.14 views

MyTube security vulnerability

MyTube is a video self-hosting downloader and player developed by Peifan Li. Versions of MyTube prior to 1.7.66 contained security vulnerabilities. These vulnerabilities stemmed from the authentication check implemented by roleBasedAuthMiddleware, which could be bypassed, allowing unverified user...

9.8CVSS5.8AI score0.00652EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-52800

Malicious code in bioql PyPI...

7.1CVSS7.1AI score0.00412EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:47 a.m.15 views

CVE-2023-48767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...

7.1CVSS7.1AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/14 5:15 p.m.10 views

CVE-2023-48767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...

6.1CVSS7.3AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 5:15 p.m.17 views

CVE-2023-48767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...

7.1CVSS0.00412EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/14 5:15 p.m.23 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...

5.8CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/14 4:43 p.m.76 views

CVE-2023-48767

CVE-2023-48767 affects WordPress plugin MyTube PlayList (versions

7.1CVSS7.1AI score0.00412EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/14 4:43 p.m.30 views

CVE-2023-48767 WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Raghu Goriya MyTube PlayList allows Reflected XSS.This issue affects MyTube PlayList: from n/a through 2.0.3...

7.1CVSS7.2AI score0.00412EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.12 views

WordPress plugin and WordPress cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.1CVSS6.6AI score0.00412EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/11/28 12:00 a.m.17 views

WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

Software MyTube PlayList Type Plugin Vulnerable versions = 2.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48767 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d799e3ad1885 Credits Khalid Yusuf Required privilege...

7.1CVSS6.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:37 a.m.27 views

MyTube YouTube Playlist Maker - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MyTube YouTube Playlist Maker published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
zdt
zdt
added 2012/12/18 12:00 a.m.23 views

MyTube MyBB Plugin 1.0 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyTube MyBB Plugin Stored XSS Date: 18/12/2012 Exploit Author: Kim Kun Bum Vendor by: Software Link: http://mods.mybb.com/view/mytube Version: 1.0 Category:Web Security Tested on: Windows7 Reason : Lack of input validation in...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2012/12/18 12:00 a.m.20 views

MyBB MyTube 1.0 Cross Site Scripting

Exploit Title: MyTube MyBB Plugin Stored XSS Date: 18/12/2012 Exploit Author: Kim Kun Bum Vendor by: Software Link: http://mods.mybb.com/view/mytube Version: 1.0 Category:Web Security Tested on: Windows7 Reason : Lack of input validation in Youtube ID field...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/09/21 12:00 a.m.32 views

Joomla MyTube SQL Injection

!/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component commytube userid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Emai...

0.1AI score
SaveExploits0
Rows per page
Query Builder