WordPress YouTube Plugin Cross-Site Request Forgery Vulnerability

WordPress is a free and open source blogging software and content management system that uses PHP and MySQL as its platform. A cross-site request forgery vulnerability exists in the WordPress YouTube plugin version 11.8.1, which allows an unauthenticated attacker to change any setting in the plug...

WordPress YouTube Embed Plus plugin <=11.8.1 - Cross-Site Request Forgery (CSRF) vulnerability

WordPress YouTube Embed Plus plugin version 11.8.1 vulnerable to the Cross-Site Request Forgery CSRF vulnerability. This vulnerability allows an attacker to change plugin settings if he manages to trick admin user to follow the forged link. Solution Please update WordPress YouTube Embed plugin to...

WordPress YouTube Embed Plus 11.8.1 Cross Site Request Forgery

Details ================ Software: YouTube Version: 11.8.1 Homepage: https://wordpress.org/plugins/youtube-embed-plus/ Advisory report: https://security.dxw.com/advisories/csrf-in-youtube-plugin/ CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CS...

Adobe is Finally Killing FLASH — At the End of 2020!

Finally, Adobe is Killing FLASH — the software that helped make the Internet a better place with slick graphics, animation, games and applications and bring online video to the masses, but it has been hated for years by people and developers over its buggy nature. But the end of an era for Adobe...

FTPGetter 5.89.0.85 Buffer Overflow

!/usr/bin/python Exploit Title: FTPGetter 5.89.0.85 Remote SEH Buffer Overflow Date: 07/14/2017 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: https://www.ftpgetter.com/ Vulnerable Version Download: Available for 30 days here: https://ufile.io/2celn I can upload again...

Fedora 26 : webkitgtk4 (2017-772bf90b03)

This update addresses the following vulnerabilities : - CVE-2017-2538 Additional fixes : - Fix web process deadlock when seeking youtube videos. - Fix blob downloads. - Improve theme rendering performance when using GTK+ = 3.20. - Fix positioning of popup menus in Wayland. - Fix several crashes a...

FTPGetter 5.89.0.85 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: FTPGetter 5.89.0.85 Remote SEH Buffer Overflow Date: 07/14/2017 Exploit Author: Paul Purcell Vendor Homepage: https://www.ftpgetter.com/ Vulnerable Version Download: Available for 30 days here:...

Vulnerability warning | FFmpeg aeration arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Recently a white hat in the HackerOne platform reported by ffmpeg vulnerability using ffmpeg HLS playlist processing way, can lead to local file exposure. Vulnerability description 6 on 24 May, the HackerOne platform named neex the white hat for the Russian social networking site VK. com reported...

One of my first sandbox escapes and bugs (CVE-2015-1743)

Advisory link: http://www.zerodayinitiative.com/advisories/ZDI-15-377/ CVE-2015-1743 Demo: https://www.youtube.com/watch?v=6Vtl8kh6keQ Below is one of my first sandbox escapes, and my entry into vulnerability research. My first bugs relied heavily on the work that Forshaw did my later ones deviat...

WordPress MDC YouTube Downloader Plugin Directory Traversal Vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.MDC YouTube Downloader is one of the video download plugins. A path traversal vulnerability exists in version 2.1.0 of...

CVE-2015-5469

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...

CVE-2015-5469

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php...

CVE-2015-5469

CVE-2015-5469 affects the WordPress MDC YouTube Downloader plugin (v2.1.0). The vulnerability is a Local File Inclusion via the file parameter to includes/download.php, enabling an attacker to read arbitrary server files through an absolute path. Impact described in sources includes potential exp...

Kids videos for YouTube - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Kids videos for YouTube published at the 'play' market has multiple vulnerabilities...

YouTube - BSD license, Dangerous filesystem permissions, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application YouTube published at the 'play' market has multiple vulnerabilities...

Kids YouTube - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids YouTube published at the 'play' market has multiple vulnerabilities...

Kids YouTube Videos withRemote - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids YouTube Videos withRemote published at the 'play' market has multiple vulnerabilities...

UBUNTU-CVE-2017-6817

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...

CVE-2017-6817

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...

CVE-2017-6817

In WordPress before 4.7.3 wp-includes/embed.php, there is authenticated Cross-Site Scripting XSS in YouTube URL Embeds...