168 matches found
PeerTube 安全漏洞
PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from an infinite loop that could cause the server to stop responding...
PT-2025-16336 · Peertube · Peertube
Name of the Vulnerable Software and Affected Versions: PeerTube affected versions not specified Description: The issue allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who...
PeerTube 安全漏洞
PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from path traversal and could lead to the disclosure of arbitrary m3u8 files...
PT-2025-16351 · Yauzl +1 · Yauzl +1
Name of the Vulnerable Software and Affected Versions: PeerTube affected versions not specified Description: This issue allows any authenticated user to cause the server to consume large amounts of disk space by extracting a Zip Bomb. When user import is enabled, which is the default setting, any...
PeerTube 安全漏洞
PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from improper handling of Zip bombs, which can lead to running out of disk space...
PT-2025-16344 · Peertube · Peertube
Name of the Vulnerable Software and Affected Versions: PeerTube affected versions not specified Description: This vulnerability allows an attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the inbox endpoint when receiving crafted ActivityPub activitie...
PeerTube 安全漏洞
PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used to create video projects. PeerTube suffers from a security vulnerability that stems from a lack of permission validation, which could lead to the addition of playlists to other users' channels via th...
CVE-2022-0881
Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1...
WordPress Embed Peertube Playlist plugin < 1.10 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Embed Peertube Playlist versions 1.10...
WordPress Embed Peertube Playlist Plugin < 1.10 is vulnerable to Cross Site Scripting (XSS)
Software Embed Peertube Playlist Type Plugin Vulnerable versions 1.10 Fixed in 1.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4602 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b614f5ef7ce2 Credits Bob Matyas Required...
CVE-2024-4602
The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4602
The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4602 Embed Peertube Playlist < 1.10 - Editor+ Stored XSS
The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4602 Embed Peertube Playlist < 1.10 - Editor+ Stored XSS
The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4602
CVE-2024-4602 affects the Embed Peertube Playlist WordPress plugin. The vulnerability exists in versions prior to 1.10 where certain plugin settings are not properly sanitised/escaped, enabling stored XSS by high-privilege users (e.g., admins), including scenarios where unfiltered_html is disable...
PT-2024-31880 · WordPress · Embed Peertube Playlist
Name of the Vulnerable Software and Affected Versions: Embed Peertube Playlist WordPress plugin versions prior to 1.10 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...
WordPress plugin Embed Peertube Playlist security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
What is the Fediverse and the Social Network Platforms It Powers
Discover the Fediverse, a decentralized social media network promoting interoperability, privacy, and customization. Explore its pros, cons, platforms like Mastodon and PeerTube, and the role of decentralization. A game-changer in online communication and community-building...
