9 matches found
EUVD-2010-4250
Malware in sbrugna...
PT-2025-9158 · WordPress · The Page Builder By Siteorigin
Name of the Vulnerable Software and Affected Versions: The Page Builder by SiteOrigin plugin for WordPress versions up to, and including, 2.31.4 Description: The issue is related to Stored Cross-Site Scripting via the Embedded VideoPB widget due to insufficient input sanitization and output...
CVE-2023-6185 Improper input validation enabling arbitrary Gstreamer pipeline injection
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...
CVE-2023-6185
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...
Mail.ru: api.video.mail.ru: XSS
Тэг скрипт за собой прикрываешь, и поехали писать свое : GET /videos/embed/corp/lady/602/1171.html?autoplay=1745baalert114f95&rbAdvertismentSlotOverride=5485&wmode=opaque HTTP/1.1 Host: api.video.mail.ru Accept: / Accept-Language: en User-Agent: Mozilla/5.0 compatible; MSIE 9.0; Windows NT 6.1;...
CVE-2010-4277
Cross-site scripting XSS vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php...
Cross site scripting
Cross-site scripting XSS vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php...
Embedded Video WordPress Plugin Cross Site Scripting
Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Embedded Video WordPress Plugin Cross Site Scripting Vulnerability CVE-2010-4277 INTRODUCTION Embedded Video is a WordPress Plugin created by Jovel Stefan to easily embedded videos in blog post...
WordPress Embedded Video Plugin <= 4.1 - XSS
Because of this vulnerability in lembedded-video.php, the attackers can inject arbitrary web script or HTML via the "content" parameter to wp-admin/post.php. Solution Update the plugin...