Lucene search
K

18 matches found

NVD
NVD
added 2026/06/11 11:16 p.m.12 views

CVE-2026-42846

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a parameter. The URL is concatenated directly...

9.8CVSS0.00603EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/11 10:49 p.m.25 views

CVE-2026-42846 ClipBucket: Remote Play URL Command Injection

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a parameter. The URL is concatenated directly...

9.8CVSS0.00603EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/11 10:49 p.m.8 views

CVE-2026-42846 ClipBucket: Remote Play URL Command Injection

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a parameter. The URL is concatenated directly...

9.8CVSS5.5AI score0.00603EPSS
Exploits0References1
CVE
CVE
added 2026/06/11 10:49 p.m.20 views

CVE-2026-42846

CVE-2026-42846 affects ClipBucket v5 prior to 5.5.3 (pre-release #140) where the Remote Play feature concatenates a user-provided URL into shell commands without escaping. This allows an authenticated user to trigger arbitrary command execution via shell metacharacters in the URL. The issue has b...

9.8CVSS5.7AI score0.00603EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/11 10:49 p.m.71 views

EUVD-2026-36367

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - 140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a parameter. The URL is concatenated directly...

9.8CVSS5.7AI score0.00603EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/11 12:0 a.m.9 views

PT-2026-48790

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3 Description The Remote Play feature in ClipBucket v5 allows authenticated users to import external URLs as video sources. The application concatenates these URLs directly into shell commands without proper...

9.8CVSS5.8AI score0.00603EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/14 1:27 a.m.4 views

CVE-2026-26005

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - 45, in Clip Bucket V5, The Remote Play allows creating video entries that reference external video URLs without uploading the video files to the server. However, by specifying an internal network host in the video URL, an SS...

5CVSS5.6AI score0.00233EPSS
Exploits1References1
NVD
NVD
added 2026/02/12 9:16 p.m.6 views

CVE-2026-26005

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - 45, in Clip Bucket V5, The Remote Play allows creating video entries that reference external video URLs without uploading the video files to the server. However, by specifying an internal network host in the video URL, an SS...

5CVSS0.00233EPSS
Exploits1References2
OSV
OSV
added 2026/02/12 8:34 p.m.3 views

CVE-2026-26005 ClipBucket v5 enables internal network scans via an SSRF vulnerability

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - 45, in Clip Bucket V5, The Remote Play allows creating video entries that reference external video URLs without uploading the video files to the server. However, by specifying an internal network host in the video URL, an SS...

5CVSS5.6AI score0.00233EPSS
Exploits1References4
CVE
CVE
added 2026/02/12 8:34 p.m.12 views

CVE-2026-26005

CVE-2026-26005 affects ClipBucket v5 prior to 5.5.3; the Remote Play feature allows creating video entries that reference external video URLs without uploading files. If an attacker specifies an internal network host in the video URL, an SSRF is triggered, causing GET requests to internal servers...

5CVSS5.6AI score0.00233EPSS
Exploits1References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-1722

Malware in sbrugna...

7.8CVSS6.4AI score0.01612EPSS
Exploits0References5
Hacker One
Hacker One
added 2020/04/17 9:23 a.m.59 views

Valve: Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installation

Tested on Windows 10 x64 On Steam starting, it will check all installed files' Integrity, and re-download the modified files. This step makes every single file in Steam installation folder is exactly its original self. Before the first time Steam stream to SteamLink Remote Play feature, it makes...

3.3AI score
Exploits0
Prion
Prion
added 2007/03/28 10:19 a.m.12 views

Design/Logic Flaw

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

7.8CVSS7.2AI score0.01612EPSS
Exploits0References4Affected Software2
NVD
NVD
added 2007/03/28 10:19 a.m.11 views

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

7.8CVSS6.7AI score0.01612EPSS
Exploits0References4
Cvelist
Cvelist
added 2007/03/28 10:0 a.m.24 views

CVE-2007-1728

The Remote Play feature in Sony Playstation 3 PS3 1.60 and Playstation Portable PSP 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets...

6.7AI score0.01612EPSS
Exploits0References4
CVE
CVE
added 2007/03/28 10:0 a.m.60 views

CVE-2007-1728

The CVE-2007-1728 entry concerns Sony PlayStation 3 (firmware 1.60) and PlayStation Portable (firmware 3.10 OE-A). The vulnerability arises from the Remote Play feature, where remote attackers can trigger a denial-of-service by flooding the affected device with UDP datagrams. The documents explic...

7.8CVSS6.7AI score0.01612EPSS
Exploits0References4Affected Software2
Packet Storm
Packet Storm
added 2007/03/27 12:0 a.m.18 views

ps3rpdos.pl.txt

!/usr/bin/perl .:Playstation 3 "Remote Play" Remote DoS Exploit:. A UDP flood while the "remote play" feature is active will result in a denial of service condition. Tested using PS3 v1.60 20GB & PSP v3.10 OE-A -DarkK POC code is based on odix's perl udp flooder use Socket; $ARGC=@ARGV; if $ARGC...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2007/03/27 12:0 a.m.33 views

Sony Playstation 3 flood DoS

UDP datagrams flood DoS with enabled remote play feature...

7.8CVSS1.8AI score0.01612EPSS
Exploits0Affected Software1
Rows per page
Query Builder