47 matches found
CVE-2025-66357
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. When the Video Download feature is in a specific communication state, the product's resources may be consumed abnormally...
CVE-2025-61976
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. If a remote attacker sends a specially crafted request to the Video Download interface, the system may become unresponsive...
CVE-2025-61976
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. If a remote attacker sends a specially crafted request to the Video Download interface, the system may become unresponsive...
EUVD-2025-203504
CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper check for unusual or exceptional conditions. If a remote attacker sends a specially crafted request to the Video Download interface, the system may become unresponsive...
CVE-2025-61976
CVE-2025-61976 affects CHOCO TEI WATCHER mini (IB-MCT001). A vulnerability described as an improper check for unusual or exceptional conditions could allow a remote attacker to send a crafted request to the Video Download interface, potentially causing the system to become unresponsive. Public so...
PT-2025-51369
Name of the Vulnerable Software and Affected Versions CHOCO TEI WATCHER mini IB-MCT001 affected versions not specified Description The CHOCO TEI WATCHER mini IB-MCT001 has a flaw due to insufficient validation of input. A remote attacker could send a specially crafted request to the Video Downloa...
Inaba Denki Sangyo CHOCO TEI WATCHER mini 代码问题漏洞
Inaba Denki Sangyo CHOCO TEI WATCHER mini is a series of surveillance cameras from Inaba Denki Sangyo. A code issue vulnerability exists in Inaba Denki Sangyo CHOCO TEI WATCHER mini, which stems from an abnormal resource consumption by the video download function in certain communication states,...
PT-2025-51370
Name of the Vulnerable Software and Affected Versions CHOCO TEI WATCHER mini IB-MCT001 affected versions not specified Description The CHOCO TEI WATCHER mini IB-MCT001 has a problem with how it handles unusual situations. Specifically, when the Video Download feature is operating in a particular...
EUVD-2006-5041
Malware in sbrugna...
EUVD-2025-29232
Malicious code in bioql PyPI...
CVE-2025-10472 harry0703 MoneyPrinterTurbo URL video.py stream_video path traversal
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function downloadvideo/streamvideo of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument filepath leads to path traversal. The attack can be...
CVE-2025-10472
MoneyPrinterTurbo (harry0703) vulnerable up to 1.2.6 due to path traversal in the URL Handler’s video download/stream logic. Affected: download_video/stream_video in app/controllers/v1/video.py; parameter file_path can be manipulated to traverse paths. Exploit is remote and publicly disclosed. Mi...
PT-2025-37739
Name of the Vulnerable Software and Affected Versions: harry0703 MoneyPrinterTurbo versions up to 1.2.6 Description: A vulnerability has been found in harry0703 MoneyPrinterTurbo up to version 1.2.6. The impacted element is the download video/stream video function of the file...
CVE-2025-7896
A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this vulnerability is the function downloadvideo/deletevideo of the file app/controllers/v1/video.py. The manipulation leads to path traversal. The attack can be launched remotely...
IROAD V Series 安全漏洞
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series, which arises from an exposed endpoint of the car recorder that allows unauthorized users to list and download recorded videos and access live video streams...
CVE-2023-6949
A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on the standard port 80 could allow an attacker to enumerate and download videos and pictures saved on the drone internal or external memory without requiring any kind of...
Command Execution Vulnerability in Xiaodu Route AV Version
Xiaodu Router is a smart router product launched by Baidu, which can transmit cloud data at will and support remote download of audio and video resources. Xiaodu Router AV version has a command execution vulnerability, which can be exploited by attackers to obtain server control privileges...
Dll hijacking vulnerability exists in Sokrat
Sokrat a FLV video download software. A dll hijacking vulnerability exists in Sokrat. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
OLX: Arbitrary File Reading
Hi! The script for video downloading doesn't properly filter the input filename, and it's possible to read arbitrary files from File System PoC http://makeyourad1.olx.in/converted/final/ready/madeit/download.php?file=download.php...
Fastest Video Download - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fastest Video Download published at the 'play' market has multiple vulnerabilities...