140 matches found
WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...
covert-tube
covert-tube Youtube에 동영상을 업로드하여 원격으로 시스템을 제어하는 프로그램입니다. Python을 사용하여 동영상과 리스너를 생성하며, 제가 읽던 일부 악성코드를 모방합니다. 간단한 텍스트로 구성된 프레임, 평문 QR 코드 또는 AES 암호화를 사용한 QR 코드로 동영상을 만들 수 있습니다. 참고: 이 PoC는 covert-control 프레임워크에 추가되었습니다. 이 프레임워크를 사용하면 OneDrive, Google Drive 및 Telegram을 통해서도 동일한 작업을 수행할 수 있습니다. 대상이...
CVE-2019-25732
PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can send GET requests to the search endpoint with crafted SQL payloads in the query parameter to...
CVE-2019-25732 PHP EI-Tube Script 3 SQL Injection via search parameter
PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can send GET requests to the search endpoint with crafted SQL payloads in the query parameter to...
CVE-2019-25732
CVE-2019-25732 affects PHP EI-Tube Script 3. The vulnerability is an SQL injection in the search parameter that allows unauthenticated attackers to send crafted GET requests to the search endpoint to extract sensitive data (usernames, passwords, version details). Root cause is improper handling/e...
CVE-2019-25732 PHP EI-Tube Script 3 SQL Injection via search parameter
PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can send GET requests to the search endpoint with crafted SQL payloads in the query parameter to...
PT-2026-46202
PHP EI-Tube Script 3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can send GET requests to the search endpoint with crafted SQL payloads in the query parameter to...
PHP EI-Tube Script SQL注入漏洞
The PHP EI-Tube Script is a video website construction system developed by Elis Atef. The PHP EI-Tube Script has a SQL injection vulnerability. This vulnerability arises from injecting malicious code through the search parameter, which may allow unauthenticated attackers to execute arbitrary SQL...
CVE-2025-23770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Caspie Fast Tube fast-tube allows Reflected XSS.This issue affects Fast Tube: from n/a through = 2.3.1...
EUVD-2014-7312
Malware in sbrugna...
EUVD-2012-1067
Malware in sbrugna...
EUVD-2016-1079
Malware in sbrugna...
EUVD-2016-1078
Malware in sbrugna...
EUVD-2014-3895
Malware in sbrugna...
EUVD-2010-4898
Malware in sbrugna...
EUVD-2025-3404
Malicious code in bioql PyPI...
EUVD-2025-3431
Malicious code in bioql PyPI...
CVE-2024-13218
The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...