Lucene search
+L

41 matches found

Cvelist
Cvelist
•added 2025/12/24 7:28 p.m.•52 views

CVE-2019-25256 VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers to access arbitrary system files through unvalidated 'ID' parameters. Attackers can exploit multiple Perl scripts like downloadsys.pl to read sensitive files by manipulati...

7.1CVSS0.00645EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•14 views

PT-2025-53342

Name of the Vulnerable Software and Affected Versions VideoFlow Digital Video Protection DVP version 2.10 Description The software contains a directory traversal issue that allows attackers to access arbitrary system files. This is possible due to unvalidated ID parameters. Attackers can exploit...

7.1CVSS6.6AI score0.00645EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•13 views

VideoFlow Digital Video Protection 安全漏洞

VideoFlow Digital Video Protection is a broadcast-quality video delivery device from VideoFlow, Inc. A security vulnerability exists in VideoFlow Digital Video Protection version 2.10, which stems from insufficient validation of the ID parameter and could lead to a directory traversal attack...

7.1CVSS6.7AI score0.00645EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•14 views

PT-2025-53341

Name of the Vulnerable Software and Affected Versions VideoFlow Digital Video Protection DVP version 2.10 Description The software contains an authenticated remote code execution issue that enables attackers to execute system commands with root privileges. Exploitation occurs through a cross-site...

8.7CVSS7.9AI score0.00443EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•2 views

CVE-2019-25256: Improper Limitation of a Pathname to a Restricted Directory

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers to access arbitrary system files through unvalidated 'ID' parameters. Attackers can exploit multiple Perl scripts like downloadsys.pl to read sensitive files by manipulati...

7.1CVSS5.9AI score0.00645EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•3 views

CVE-2019-25255: Improper Neutralization of Special Elements used in an OS Command

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows attackers to execute system commands with root privileges. Attackers can exploit the vulnerability through a cross-site request forgery CSRF mechanism to gain unauthorized system...

8.7CVSS6.5AI score0.00443EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2018/04/02 12:00 a.m.•50 views

VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal

VideoFlow Digital Video Protection DVP 2.10 - Directory Traversal VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is...

7.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/04/02 12:00 a.m.•50 views

VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials

VideoFlow Digital Video Protection DVP 2.10 - Hard-Coded Credentials VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the D...

SaveExploits0
Exploit DB
Exploit DB
•added 2018/04/02 12:00 a.m.•65 views

VideoFlow Digital Video Protection (DVP) 2.10 - Hard-Coded Credentials

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured as Protector, Sentinel or Fortress Version = The...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/04/02 12:00 a.m.•51 views

VideoFlow Digital Video Protection (DVP) 2.10 - Directory Traversal

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured as Protector, Sentinel or Fortress Version = The Operating...

5.3AI score
SaveExploits0
zdt
zdt
•added 2018/04/01 12:00 a.m.•54 views

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is...

0.5AI score
SaveExploits0
zdt
zdt
•added 2018/04/01 12:00 a.m.•54 views

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vulnerability

Exploit for hardware platform in category web applications VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/03/31 12:00 a.m.•53 views

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured as Protector, Sentinel or Fortress Version = The...

7.1AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2018/03/31 12:00 a.m.•563 views

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal

Summary VideoFlow's Digital Video Protection DVP product is used by leading companies worldwide to boost the reliability of IP networks, including the public Internet, for professional live broadcast. DVP enables broadcast companies to confidently contribute and distribute live video over IP with...

7.1CVSS5.8AI score0.00645EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2018/03/31 12:00 a.m.•608 views

VideoFlow Digital Video Protection DVP 10 Authenticated Root Remote Code Execution

Summary VideoFlow's Digital Video Protection DVP product is used by leading companies worldwide to boost the reliability of IP networks, including the public Internet, for professional live broadcast. DVP enables broadcast companies to confidently contribute and distribute live video over IP with...

8.7CVSS6.6AI score0.00443EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2018/03/31 12:00 a.m.•61 views

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal

VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal Vendor: VideoFlow Ltd. Product web page: http://www.video-flow.com Affected version: 2.10 X-Prototype-Version: 1.6.0.2 System = Indicate if the DVP is configured as Protector, Sentinel or Fortress Version = The Operating...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2017/05/25 12:00 a.m.•6 views

Joomla VideoFlow SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla VideoFlow. An attacker can exploit this vulnerability to gain access to sensitive database information...

8.1AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2017/05/24 12:00 a.m.•47 views

Joomla VideoFlow 1.2.0 SQL Injection

Exploit Title: Joomla VideoFlow 1.2.0 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/videoflow/ My Home : http://persian-team.ir/ Google Dork :...

1.4AI score
SaveExploits0
zdt
zdt
•added 2017/05/24 12:00 a.m.•41 views

Joomla VideoFlow 1.2.0 SQL Injection Vulnerability

Joomla VideoFlow extension version 1.2.0 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla VideoFlow 1.2.0 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home :...

0.8AI score
SaveExploits0
zdt
zdt
•added 2016/10/04 12:00 a.m.•36 views

Joomla com_videoflow SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comvideoflow SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comvideoflow Vendor Homepage : http://www.fidsoft.com version : 1.1.3 - 1.1.5 Tested on: BACK BOX skype:xbadgirl21 Date:...

7.1AI score
SaveExploits0
Rows per page
Query Builder