Stolen TikTok Videos, Bent on Fraud, Invade YouTube Shorts

Scammers are taking full advantage of the launch of Google’s new TikTok competitor, YouTube Shorts, which has turned out to be an awesome tool for feeding billions of engaged viewers stolen content. That content is being used to run rackets like promoting adult dating websites, hustling diet pill...

GHSA-HG2P-2CVQ-4PPV Cross-site scripting in lazysizes

lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript...

Youtube - Php-Mirroring Cross-Site Scripting Vulnerability

Youtube-Php-Mirroring is a Chinese Php development based on Youtube video proxy scripts. ytube-php-mirroring is vulnerable to a cross-site scripting vulnerability that originates in the file ytproxy/index.php. site scripting XSS vulnerability in the file ytproxy/index.php. No detailed vulnerabili...

CVE-2021-43692

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

CVE-2021-43692

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

Cross site scripting

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

CVE-2021-43692

youtube-php-mirroring last update Jun 9, 2017 is affected by a Cross Site Scripting XSS vulnerability in file ytproxy/index.php...

CVE-2021-43692

The CVE-2021-43692 details an XSS vulnerability in the Youtube-Php-Mirroring project, affecting the file ytproxy/index.php. The available sources consistently identify a cross-site scripting issue in that script; no explicit affected versions, root-cause details, or remediation are provided in th...

Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency

Threat actors are exploiting improperly-secured Google Cloud Platform GCP instances to download cryptocurrency mining software to the compromised systems as well as abusing its infrastructure to install ransomware, stage phishing campaigns, and even generate traffic to YouTube videos for view cou...

Youtube-Php-Mirroring 跨站脚本漏洞

Youtube-Php-Mirroring is a Chinese Php development based on Youtube video proxy scripts. ytube-php-mirroring is vulnerable to a cross-site scripting vulnerability that originates in the file ytproxy/index.php. site scripting XSS vulnerability in the file ytproxy/index.php. No detailed vulnerabili...

PT-2021-23917 · Unknown · Youtube-Php-Mirroring

Name of the Vulnerable Software and Affected Versions: youtube-php-mirroring affected versions not specified Description: The issue is a Cross Site Scripting XSS vulnerability located in the file ytproxy/index.php. This vulnerability affects an unspecified version of youtube-php-mirroring...

Google’s Threat Horizons report: Will the straightforward approach get results?

Google’s Cybersecurity Action Team has released a Threat Horizons report focusing on cloud security. It’s taken some criticism for being surprisingly straightforward and less complex than you may expect. On the other hand, many businesses simply don’t understand many of the threats at large...

“Free Steam games” videos promise much, deliver malware

Gamers are a hot target for scammers, especially in the run up to Christmas. Major games are released throughout the last few months of any year, and the FOMO fear of missing out is strong. Especially if said titles offer pre-order exclusive bonuses, or deals and discounts for a few weeks after t...

Join us at InfoSec Jupyterthon 2021

We’re excited to invite our community of infosec analysts and engineers to the second annual InfoSec Jupyterthon taking place on December 2-3, 2021. This is an online event organized by our friends in the Open Threat Research Forge, together with folks from the Microsoft Threat Intelligence Cente...

Join us at InfoSec Jupyterthon 2021

We’re excited to invite our community of infosec analysts and engineers to the second annual InfoSec Jupyterthon taking place on December 2-3, 2021. This is an online event organized by our friends in the Open Threat Research Forge, together with folks from the Microsoft Threat Intelligence Cente...

YouTube Video Grabber 1.9.9.1 Buffer Overflow

Exploit Title: YouTube Video Grabber 1.9.9.1 - Buffer Overflow SEH Date: 01.11.2021 Software Link: https://www.litexmedia.com/ytgrabber.exe Exploit Author: Achilles Tested Version: 1.9.9.1 Tested on: Windows 7 64bit 1.- Run python code : YouTube.py 2.- Open EVIL.txt and copy All content to...

YouTube Video Grabber 1.9.9.1 - Buffer Overflow (SEH)

Exploit Title: YouTube Video Grabber 1.9.9.1 - Buffer Overflow SEH Date: 01.11.2021 Software Link: https://www.litexmedia.com/ytgrabber.exe Exploit Author: Achilles Tested Version: 1.9.9.1 Tested on: Windows 7 64bit 1.- Run python code : YouTube.py 2.- Open EVIL.txt and copy All content to...

VMconf 22 Vulnerability Management conference: Call For Papers started

Hello everyone! This episode will be about the VMconf 22 Vulnerability Management conference. CFP started on November 1, which will last a month and a half. So please submit your talk or share this video with someone who might be interested. Lets talk about the conference itself. All started with...

YouTube Video Grabber v1.9.9.1-Buffer Overflow (SEH) Exploit

Exploit Title: YouTube Video Grabber v1.9.9.1-Buffer Overflow SEH Software Link: https://www.litexmedia.com/ytgrabber.exe Exploit Author: Achilles Tested Version: 1.9.9.1 Tested on: Windows 7 64bit 1.- Run python code : YouTube.py 2.- Open EVIL.txt and copy All content to Clipboard 3.- Open YouTu...

WordPress YouTube plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress YouTube plugin before version 1.4 has a cross-site scripting vulnerability that stems from a lack of checksum filtering ...