All in One Video Downloader 1.2 - Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: All in One Video Downloader 1.2 - SQL Injection Google Dork: "developed by Niche Office" Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://nicheoffice.web.tr/...

All In One Video Downloader 1.2 SQL Injection

Exploit Title: All in One Video Downloader 1.2 - SQL Injection Google Dork: "developed by Niche Office" Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://nicheoffice.web.tr/ Software Link:...

All In One Video Downloader 1.2 SQL Injection

Exploit Title: All in One Video Downloader 1.2 - SQL Injection Google Dork: "developed by Niche Office" Date: 1 Jan 2019 Exploit Author: Deyaa Muhammad Author EMail: contact at deyaa.me Author Blog: http://deyaa.me Vendor Homepage: https://nicheoffice.web.tr/ Software Link:...

Google Chrome Video Downloader Extension XSS

A cross-site scripting vulnerability exists in Google Chrome Video Downloader Extension. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Video Downloader professional extension for Chrome cross-site scripting vulnerability

Video Downloader professional extension for Chrome is a video download extension for Google Chrome. A cross-site scripting vulnerability exists in versions prior to 2018-04-05 of Video Downloader professional extension for Chrome. A remote attacker can exploit the vulnerability to execute arbitra...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

Design/Logic Flaw

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

CVE-2018-10000

CVE-2018-10000 describes a universal XSS (UXSS) in the Video Downloader professional extension for Chrome, prior to 2018-04-05. The issue arises via vectors related to a link64_msgAddLinks event, allowing an attacker to trigger cross-site scripting within the extension context. The NVD entry list...

CVE-2018-10000

The Video Downloader professional extension before 2018-04-05 for Chrome has Universal XSS UXSS via vectors related to a link64msgAddLinks event...

Video Downloader Universal Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Video Downloader Extension: Universal XSS Browsing through the list of most popular Chrome extensions, I noticed this extension with 4M users:...

ConverTo Video Downloader&Converter File Download Vulnerability

ConverTo Video Downloader&Converter is an online video download system. A security vulnerability exists in ConverTo Video Downloader&Converter version 1.4.1. The vulnerability can be exploited to download arbitrary files by sending a 'token' parameter to the download.php file...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

Design/Logic Flaw

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php...

CVE-2017-15956

ConverTo Video Downloader & Converter v1.4.1 is vulnerable to an Arbitrary File Download via the token parameter to download.php. CNVD-2017-36121 and CVE-2017-15956 describe that the vulnerability allows downloading arbitrary files by supplying a crafted token, exposing sensitive data. The root c...

ero-video-downloader.net XSS vulnerability

Open Bug Bounty ID: OBB-372670 Description| Value ---|--- Affected Website:| ero-video-downloader.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

ConverTo Video Downloader And Converter 1.4.1 Arbitrary File Download

Exploit Title: ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Dork: N/A Date: 29.09.2017 Vendor Homepage: https://codecanyon.net/user/lemonadeflirt Software Link: https://codecanyon.net/item/converto-video-downloader-converter/13225966 Demo: http://vd.googglet.com/ Version:...

ConverTo Video Downloader Converter 1.4.1 - Arbitrary File Download

ConverTo Video Downloader Converter 1.4.1 - Arbitrary File Download Exploit Title: ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download Dork: N/A Date: 29.09.2017 Vendor Homepage: https://codecanyon.net/user/lemonadeflirt Software Link:...