YT-Spammer-Purge

YouTube Spammer Purge ما هذا؟ - يتيح لك تصفية والبحث عن تعليقات المزعجين على قناتك وقنوات الآخرين بطرق متعددة، وحذفها/الإبلاغ عنها دفعة واحدة انظر الميزات أدناه. كيفية التحميل: انقر على رابط "Releases" على اليمين، ثم في أحدث إصدار، تحت 'Assets' انقر لتحميل "YTSpammerPurge.exe". قد تضطر إلى النقر...

CVE-2026-26331

Injection de commande arbitraire via --netrc-cmd dans yt-dlp Sévérité : Élevée CVSS 8.8 Logiciel concerné : yt-dlp = 2023.06.21, Correctif inclus dans : 2026.02.21 Avis de sécurité : GHSA-g3gw-q23r-pgqm CVE : CVE-2026-26331 Résumé L’option de ligne de commande --netrc-cmd de yt-dlp ou le paramètr...

CVE-2026-93371

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371

A command injection vulnerability exists in marcopiovanello/yt-dlp-web-ui up to v4 , specifically in the NewGenericDownload function within server/internal/downloaders/generic.go. Manipulation of the params argument allows a remote, unauthenticated attacker to execute arbitrary commands with no u...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

EUVD-2026-82640

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371 marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

CVE-2026-93371: Improper Neutralization of Special Elements used in a Command

A security vulnerability has been detected in marcopiovanello yt-dlp-web-ui up to v4. This issue affects the function NewGenericDownload of the file server/internal/downloaders/generic.go. Such manipulation of the argument params leads to command injection. It is possible to launch the attack...

PT-2026-95225

Name of the Vulnerable Software and Affected Versions marcopiovanello yt-dlp-web-ui versions prior to v5 Description Remote command injection is possible through the manipulation of the params argument within the NewGenericDownload function located in the server/internal/downloaders/generic.go...

FreeBSD : yt-dlp: Improper Neutralization of Special Elements (cd5bfb7d-ac34-11f1-9b94-901b0e13f1a0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cd5bfb7d-ac34-11f1-9b94-901b0e13f1a0 advisory. https://github.com/yt-dlp/yt-dlp/security/advisories/GHSA-6v4j-43gg-vj32 reports: yt-dlp and youtube-dl...

CVE-2026-84937 YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax

The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Contributor role and above to perform SQL injection attacks and read arbitrary data from the database...

WordPress Video Player for YouTube plugin < 2.1.0 - Contributor+ SQLi vulnerability

Contributor+ SQLi vulnerability discovered by Artus KG in WordPress Plugin YT Player versions 2.1.0...

CVE-2026-84937 YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax

The Video Player for YouTube WordPress plugin before 2.1.0 does not properly sanitise and escape user-supplied input before using it in a SQL statement, allowing users with the Contributor role and above to perform SQL injection attacks and read arbitrary data from the database...

CVE-2026-84937

The Video Player for YouTube WordPress plugin versions before 2.1.0 is vulnerable to SQL injection due to improper sanitization and escaping of user-supplied input within SQL statements. This flaw specifically affects users with the Contributor role and above, who can exploit the vulnerability to...

CVE-2026-79792

zackees transcribe-anything up to version 4.1.0 is affected by an OS command injection in the ytdlp_download function within src/transcribe_anything/ytldp_download.py (component: Yt-dlp Download). The flaw is triggered by manipulating the url argument, allowing a remote attacker to execute arbitr...

CVE-2026-79792 zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlpdownload of the file src/transcribeanything/ytldpdownload.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. T...

CVE-2026-79792

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlpdownload of the file src/transcribeanything/ytldpdownload.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. T...

CVE-2026-79792: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlpdownload of the file src/transcribeanything/ytldpdownload.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely. T...

PT-2026-81852

A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp download of the file src/transcribe anything/ytldp download.py of the component Yt-dlp Download. This manipulation of the argument url causes os command injection. The attack may be initiated remotely...