Apache-Druid-CVE-2021-25646

Apache-Druid-CVE-2021-25646 Youtube https://www.youtube.com/watch?v=-mdK5HSRiQU...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

CVE-2026-10104-POC

CVE-2026-10104: Stored Cross-Site Scripting in Product Video Gallery for WooCommerce Summary...

unknownpwn.github.io

Tecnovision LED Video Wall Vulnerabilities and Exploits. From SQLi to full root access. Introduction: Tecnovision is a manufacturer of LED Video Walls used in arenas For example, Twickenham Stadium, concert halls, shopping malls, as roadsigns and much much more. DlxSpot Player 4 is the software...

Suprema BioStar <2.8.2 - Local File Inclusion

Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. id: CVE-2020-15050 info: name: Suprema BioStar 2.8.2 - Local File Inclusion author: gy741 severity: high description: Suprema BioStar before 2.8.2 Video Extensio...

WordPress HTML5 Video Player - SQL Injection

WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...

Tube Video Ads Lite - Reflected XSS

Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

CVE-2024-5522-PoC

CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Unauthenticated SQLi The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks setup script: 1. git clone...

iCSeeU

This is a suite of tools/PoCs/exploits that can be used iCSee video-call cameras via LAN and maybe non-video call cameras as well. This could easily be used to flash alternative firmwares as a replacement for the SD card update method. Note: Any memory corruption exploit will only work if your...

CVE-2022-25584

Flexwatch Flexwatch-CVE This document is for CVE-2022-25584 "RESERVED" https://vulners.com/cve/CVE-2022-25584 This vulnerability has been indexed by CNVD, but has not yet been made public CNVD ID:CNVD-2021-103443 Vulnerability to reproduce: We found that the FlexWATCH FW3170-PS-E Network Video...

CVE-2020-25748

CVE-2020-25748 Suggested description A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can als...

CVE-2024-53615

CVE-2024-53615 A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file. Prerequisites: ffmpeg in PATH config.php: 'allowupload' = true exec must be...

SymaX5SW-Rx-Tx

SymaX5SW Rx and Tx Research carried out on a SYMA X5SW Drone with three defined objectives. 1. Intercept the telemetry of the Drone and display it in a graphical interface in real-time. 2. Create a transmitter command control, using RF, Arduino modules and C code. 3. Intercept the video stream of...

CVE-2024-42346

CVE-2024-42346 CVE-2024-42346 video: https://github.com/user-attachments/assets/e5e82cfa-d96c-44b2-bc84-0149022e5508 Read more things on:...

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

WordPress HTML5 Video Player < 2.5.27 - SQL Injection

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...

Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass

The compromised Advanced Responsive Video Embedder WordPress plugin releases 10.8.7 and 10.8.8 accept a hardcoded token through the wplogin parameter and establish an authenticated administrator session before normal authentication. A single unauthenticated GET request triggers the backdoor. This...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...