CVE-2022-34065

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34065

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43164

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Privilege escalation

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34065

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34065

CVE-2022-34065 affects the PyPI package Rondolu-YT-Concate v0.1.0 . Multiple connected documents describe a code execution backdoor in this package, enabling attackers to access sensitive user information and digital currency keys and to escalate privileges. The root cause is reported as backdoor...

PT-2022-21997

Name of the Vulnerable Software and Affected Versions Rondolu-YT-Concate version 0.1.0 Description The issue concerns a code execution backdoor in the Rondolu-YT-Concate package. This backdoor allows attackers to access sensitive user information, including digital currency keys, and escalate...

PT-2022-37404

Name of the Vulnerable Software and Affected Versions Rondolu-YT-Concate version 0.1.0 Description The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges due to a code execution backdoor in the package. Recommendations For version...

rondolu-yt-concate 安全漏洞

rondolu-yt-concate is a pip package for individual developers. A security vulnerability exists in the rondolu-yt-concate package in PyPI version v0.1.0. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

CVE-2022-34065: Undefined Security Weakness

The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2021-15951

Name of the Vulnerable Software and Affected Versions WP YouTube Lyte WordPress plugin versions prior to 1.7.16 Description The issue allows high privilege users to set XSS payload on the lyte yt api key and lyte notification settings, leading to stored Cross-Site Scripting issues due to the lack...

yt-mp3s.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1142656 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting yt-mp3s.com website and it...

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...

yt-download.org XSS vulnerability

Open Bug Bounty ID: OBB-477844 Description| Value ---|--- Affected Website:| yt-download.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

PT-2017-16981

Name of the Vulnerable Software and Affected Versions ytnef versions prior to 1.9.1 Description An issue was discovered related to a patch described as "5 of 9. Integer Overflow." This issue is associated with an integer overflow. Recommendations For versions prior to 1.9.1, update to version 1.9...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

YT-Videos Script - id SQL Injection

YT-Videos Script - id SQL Injection source: https://www.securityfocus.com/bid/54859/info YT-Videos Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromi...

YT-Videos Script - 'id' SQL Injection

source: https://www.securityfocus.com/bid/54859/info YT-Videos Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

WordPress YT-Audio 1.7 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress YT-Audio 1.7 Vulnerability...........Reflected Cross-site Scripting Download................http://www.erik-rasmussen.com/blog/2007/09/25/yt-audio-audio-hosting-from-youtube-in-wordpress/...

WordPress YT-Audio Plugin 1.7 - Cross-Site Scripting

This YT-Audio plugin's "v" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...