Lucene search
+L

25379 matches found

Kitploit
Kitploit
•added 2026/10/26 12:58 p.m.•11 views

CVE-2021-4034-Capture-the-flag

CVE-2021-4034-Capture-the-flag Video Demonstration of Capture the Flag: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...

7.8CVSS7.4AI score0.94921EPSS
SaveExploits158
Kitploit
Kitploit
•added 2026/10/26 12:56 p.m.•24 views

AV-Chaos-Monkey

AV Chaos Monkey Distributed chaos engineering platform for load testing video conferencing systems. Simulates 1500+ WebRTC participants with H.264/Opus streams and injects network chaos spikes to validate system resilience under degraded conditions Architecture 1. Media Processing Pipeline : FFmp...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/26 12:42 p.m.•28 views

CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Unauthenticated SQLi The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks setup script: 1. git clone...

6.5CVSS6.1AI score0.02639EPSS
SaveExploits6References1
Kitploit
Kitploit
•added 2026/10/26 11:33 a.m.•22 views

Audio-Video-Communications-Top-10

This repository does not have a README...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/10/26 11:16 a.m.•11 views

CVE-2026-115956

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Panorama Viewer – 360 Degree Image + Video Viewer panorama allows Stored XSS.This issue affects Panorama Viewer – 360 Degree Image + Video Viewer: from n/a through 1.8.3...

6.5CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/26 10:34 a.m.•10 views

CVE-2026-115956

The WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin (versions n/a through 1.8.3 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to execute malicious scripts...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/26 10:34 a.m.•16 views

CVE-2026-115956 WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Panorama Viewer – 360 Degree Image + Video Viewer panorama allows Stored XSS.This issue affects Panorama Viewer – 360 Degree Image + Video Viewer: from n/a through 1.8.3...

6.5CVSS0.0017EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/26 10:34 a.m.•8 views

EUVD-2026-109732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Panorama Viewer – 360 Degree Image + Video Viewer panorama allows Stored XSS.This issue affects Panorama Viewer – 360 Degree Image + Video Viewer: from n/a through 1.8.3...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/26 10:34 a.m.•8 views

WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Panorama Viewer – 360 Degree Image + Video Viewer versions = 1.8.3...

6.5CVSS5.8AI score0.0017EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/26 10:16 a.m.•6 views

CVE-2026-103377

A reflected Cross-Site Scripting XSS vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation ...

5.1CVSS0.00408EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/26 9:29 a.m.•9 views

CVE-2026-103377

A reflected Cross-Site Scripting (XSS) vulnerability exists in the web application of the Castile-La Mancha Regional Parliament’s video library . The root cause is the application's failure to properly sanitize user-supplied content before rendering it in the browser. A remote attacker could expl...

5.1CVSS6.6AI score0.00408EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/26 9:29 a.m.•8 views

EUVD-2026-109684

A reflected Cross-Site Scripting XSS vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation ...

5.1CVSS6.6AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/26 9:29 a.m.•20 views

CVE-2026-103377 Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha

A reflected Cross-Site Scripting XSS vulnerability has been identified in the web application of the Castile-La Mancha Regional Parliament’s video library. The application embeds user-supplied content into the page without properly sanitising it before it is rendered by the browser. Exploitation ...

5.1CVSS0.00408EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/26 6:43 a.m.•22 views

Gallery-Plugin-SQL-Injection

Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/10/26 4:17 a.m.•13 views

CVE-2026-116114

A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The...

6.3CVSS0.00188EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/26 3:30 a.m.•11 views

CVE-2026-116114

The Yoosee GM8135S Camera (version 21.00.01.36 ) is vulnerable to a remote attack due to an unknown function in the /npc/npc file within the Live UDP H.264 Video Stream Handler component. This flaw leads to the cleartext transmission of sensitive information , categorized under CWE-319 and CWE-31...

6.3CVSS4.3AI score0.00188EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/26 3:30 a.m.•10 views

EUVD-2026-109606

A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The...

6.3CVSS4.3AI score0.00188EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/26 3:30 a.m.•22 views

CVE-2026-116114 Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission

A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The...

6.3CVSS0.00188EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/26 3:28 a.m.•27 views

CVE-2024-52430

CVE-2024-52430 Lis Video Gallery = 0.2.1 - Unauthenticated PHP Object Injection Description The Lis Video Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.1 via deserialization of untrusted input. This makes it possible for unauthenticated...

9.8CVSS8.8AI score0.01072EPSS
SaveExploits0
Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•297 views

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

9.8CVSS8.6AI score0.11125EPSS
SaveExploits1References5
Rows per page
Query Builder