21724 matches found
EXPLOIT-CVE-2026-22778
CVE-2026-22778 — vLLM RCE in video processing Vulnerable lab + proof of concept for CVE-2026-22778 CVSS 9.8, an unauthenticated remote code execution chain in vLLM's multimodal ingestion path...
CVE-2026-88622
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...
CVE-2026-40534
An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...
CVE-2026-40534
CVE-2026-40534 is a cross-site scripting (XSS) vulnerability in the Video API component of Synology DiskStation Manager (DSM) , caused by improper neutralization of input during web page generation. Remote authenticated users can read or write limited files when the media player is launched. Affe...
EUVD-2026-82789
An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...
CVE-2026-40534
An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Video API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write limited files when the player is launched...
Gallery-Plugin-SQL-Injection
Exploit Title: Wordpress Video Gallery - YouTube Gallery and Vimeo Gallery Plugin SQL Injection Date: 2024-07-05 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-video-gallery/ Version 2.3.6 1. Access the Admin Panel: Navigate to the admin panel of your...
lscript
The lazy script has not been updated for a while due to me being very busy with my life. I will try my best to upload an update when I find the time Welcome to the LAZY script v2.1.4 A video Hackersploit made : https://www.youtube.com/watch?v=oBpo5sElrMY A video sstec made:...
EUVD-2026-82974
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen is used to open the URL in binary read-only mode. The content is then written to the /tmp/ directory, with the filename derived from basename ...
CVE-2026-88622
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...
CVE-2026-88623
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read via the up.php script. The user-supplied url parameter, submitted via POST, is passed directly to fopen() in binary read-only mode without sufficient validation. The fetched content is then written to the /tmp/ directory using...
EUVD-2026-82975
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...
CVE-2026-88622
NUUO Network Video Recorder version 2.0.0 is affected by a Command Injection vulnerability in the handle_import_privilege.php component. The flaw allows an unauthenticated remote attacker (with user interaction) to execute arbitrary commands, resulting in high impact to confidentiality, integrity...
rickmote
rickmote The Rickmote Controller: Hijack TVs using Google Chromecast The Rickmote is a Python program for Hijacking Chromecasts and playing arbitrary video to their connected TVs. Full details on how the hack works were provided at the talk "Rickrolling your Neighbors with Google Chromecast" at...
CVE-2026-92063
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the Audio/Video component...
ekoparty
EKOPARTY MIAMI Overview Slides and materials for EKOPARTY Miami. Youtube Link: https://youtu.be/FdvrwQH7LYU?si=MVD8NMykO39dP0v9 Google video links are embedded within the PDF...
CVE-2026-92043
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Audio/Video component...
DroneCamera
DroneCamera An Android app for viewing the live video stream from HASAKEE FPV drones. Built by reverse engineering the proprietary UDP protocol used by the drone's WiFi camera. Supported Drone HASAKEE FPV Drone WiFi SSID: HASAKEE-WiFi-XXXXX VGA camera using the 0x6363 UDP protocol Drone IP:...
CVE-2026-24074
CVE-2026-24074 is an out-of-bounds write in a Video component on Qualcomm platforms. The root cause is memory corruption that occurs when data with large offset and length values exceeds buffer limits during data copy operations. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low co...