CVE-2026-33493

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the objects/import.json.php endpoint accepts a user-controlled fileURI POST parameter with only a regex check that the value ends in .mp4. Unlike objects/listFiles.json.php, which was hardened with a realpath +...

CVE-2026-33493

creationtimestamp| type| source ---|---|--- 2026-03-20 17:44:30+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-83xq-8jxj-4rxm 2026-03-25 04:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhuaeo5amk2u...

CVE-2023-33493

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer ajaxmanager module for PrestaShop through 2.3.0, allows remote attackers to upload dangerous files without restrictions...

CVE-2024-33493

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

CVE-2023-33493

creationtimestamp| type| source ---|---|--- 2023-08-01 20:38:35+00:00| seen| https://t.me/cibsecurity/67531...

CVE-2023-33493

The CVE-2023-33493 entry concerns PrestaShop’s Ajaxmanager (File and Database explorer) module up to version 2.3.0, where an Unrestricted Upload of File with Dangerous Type vulnerability allows remote attackers to upload dangerous files without restrictions. The core issue is an insecure file upl...

CVE-2021-33493

CVE-2021-33493 pertains to Open-Xchange OX App Suite (OX App Suite/OX Documents) up to version 7.10.5, where the middleware component allows Code Injection via YAML-formatted Java classes. The root cause is the handling of YAML-based Java class definitions in the middleware, enabling an attacker ...

CVE-2021-33493

The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format...

OX App Suite / Ox Documents 7.10.x XSS / Code Injection / Traversal

Product: OX App Suite, OX Documents Vendor: OX Software GmbH Internal reference: MWB-993 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.3-rev35,...