Lucene search
+L

1865 matches found

CVE
CVE
added 2023/11/22 5:51 p.m.48 views

CVE-2023-25987

CVE-2023-25987 affects WordPress plugin My YouTube Channel (versions

8.8CVSS6.5AI score0.00309EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:00 a.m.9 views

PT-2023-20412 · WordPress · My Youtube Channel

Name of the Vulnerable Software and Affected Versions: My YouTube Channel plugin versions = 3.23.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application th...

8.8CVSS8.8AI score0.00309EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/22 12:00 a.m.7 views

WordPress Plugin My YouTube Channel Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

8.8CVSS6.5AI score0.00309EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/16 10:15 p.m.4 views

CVE-2023-47688

Cross-Site Request Forgery CSRF vulnerability in Alexufo Youtube SpeedLoad plugin = 0.6.3 versions...

8.8CVSS7.3AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/16 10:15 p.m.20 views

CVE-2023-47688

Cross-Site Request Forgery CSRF vulnerability in Alexufo Youtube SpeedLoad plugin = 0.6.3 versions...

8.8CVSS0.00277EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/16 10:15 p.m.18 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Alexufo Youtube SpeedLoad plugin = 0.6.3 versions...

6.8CVSS7.3AI score0.00277EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/16 10:06 p.m.34 views

CVE-2023-47688 WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alexufo Youtube SpeedLoad plugin = 0.6.3 versions...

4.3CVSS9AI score0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/16 10:06 p.m.17 views

CVE-2023-47688 WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alexufo Youtube SpeedLoad plugin = 0.6.3 versions...

4.3CVSS7.4AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/16 10:06 p.m.84 views

CVE-2023-47688

CVE-2023-47688 affects the WordPress Youtube SpeedLoad plugin (versions

8.8CVSS6.5AI score0.00277EPSS
SaveExploits0References1Affected Software1
Talos Blog
Talos Blog
added 2023/11/16 7:00 p.m.40 views

We all just need to agree that ad blockers are good

I dont think this is a particularly bold take -- but Im not afraid to say that ad blockers are good! Ever since I started using one sometime in 2016, my experience of using the internet has improved exponentially. I can finally easily find a recipe for dinner on a random influencers blog, get a...

4.3CVSS7.3AI score0.1667EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/11/16 1:54 a.m.7 views

SUSE CVE-2023-46121

yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie...

3.7CVSS7AI score0.00321EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/16 12:00 a.m.5 views

WordPress Plugin Youtube SpeedLoad Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS6.6AI score0.00277EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/15 12:15 a.m.15 views

UBUNTU-CVE-2023-46121

yt-dlp is a youtube-dl fork with additional features and fixes. The Generic Extractor in yt-dlp is vulnerable to an attacker setting an arbitrary proxy for a request to an arbitrary url, allowing the attacker to MITM the request made from yt-dlp's HTTP session. This could lead to cookie...

5CVSS5.9AI score0.00321EPSS
SaveExploits0References5
CVE
CVE
added 2023/11/14 11:31 p.m.91 views

CVE-2023-46121

CVE-2023-46121 – yt-dlp Generic Extractor MitM vulnerability affects the yt-dlp project (a fork of youtube-dl) where the Generic Extractor could be fed an arbitrary proxy via a crafted URL, enabling a man-in-the-middle on the HTTP session and potential cookie exfiltration. Technical details acros...

5CVSS4.9AI score0.00321EPSS
SaveExploits0References3Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/14 12:00 a.m.16 views

Video Gallery – YouTube Gallery <= 2.2.1 - Admin+ SQLi

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

9.8CVSS9.7AI score0.00551EPSS
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/11/10 1:42 p.m.63 views

YouTube shows ads for ad blocker, financial scams

After performing local experiments for a few months, YouTube recently expanded its effort to block ad blockers. The move was immediately unpopular with some users, and raised some questions in Europe about whether it was breaking privacy laws. In addition, there are some still some fundamental...

7.1AI score
SaveExploits0
Patchstack
Patchstack
added 2023/11/09 12:00 a.m.11 views

WordPress Youtube SpeedLoad Plugin <= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Youtube SpeedLoad Type Plugin Vulnerable versions = 0.6.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47688 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a0f589aa5591 Credits Nguyen Xuan Chien...

8.8CVSS6.6AI score0.00277EPSS
SaveExploits0References1Affected Software1
Wired Threat Level
Wired Threat Level
added 2023/11/07 4:52 p.m.28 views

YouTube's Ad Blocker Detection Believed to Break EU Privacy Law

A complaint filed with the EU’s independent data regulator accuses YouTube of failing to get explicit user permission for its ad blocker detection system, potentially violating the ePrivacy Directive...

7.2AI score
SaveExploits0
NVD
NVD
added 2023/11/06 9:15 a.m.31 views

CVE-2023-45069

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1...

9.8CVSS9.8AI score0.00551EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 9:15 a.m.25 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin allows SQL Injection.This issue affects Video Gallery – Best WordPress YouTube Gallery Plugin: from n/a through 2.1...

7.5CVSS7.8AI score0.00551EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder