68 matches found
CVE-2026-126542
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
CVE-2026-126542 WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
CVE-2026-126542 WWBN AVideo 6.5 through 29.7.1 Authentication Bypass via Hybridauth Social Login
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
CVE-2026-126542
WWBN AVideo versions 6.5 through 29.7.1 are vulnerable to an authentication bypass flaw in the Hybridauth social login mechanism. Unauthenticated attackers can gain unauthorized access to any account, including administrator accounts , by setting their X, Facebook, Yahoo, or LinkedIn display name...
CVE-2026-126542
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
EUVD-2026-123067
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
PT-2026-144921
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions 6.5 through 29.7.1 Description An authentication bypass exists via Hybridauth social login. Unauthenticated attackers can gain access to any account, including administrators, without a password by setting their X, Faceboo...
CVE-2026-126542: WWBN AVideo: WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…
WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email,...
HybridAuth - install.php RCE (CVE-2014-125116)
Exploits CVE-2014-125116 by writing system$POST0 into config.php via the HybridAuth installer, then invoking commands through config.php. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """HybridAuth install.php / config.php RCE CVE-2014-125116 — execute session.""...
HybridAuth - install.php RCE Detection (CVE-2014-125116)
Detects HybridAuth installer RCE by writing system$POST0 into config via install.php then POSTing 0=id to config.php. !/usr/bin/env python3 -- coding: utf-8 -- """HybridAuth install.php / config.php RCE CVE-2014-125116.""" import re from kittysploit import from lib.protocols.http.httpclient impor...
CVE-2026-4587
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
GHSA-R3HF-Q3MF-7H6W HybridAuth Has Improper SSL Certificate Validation in Curl HTTP Client
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
EUVD-2026-14425
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
HybridAuth Has Improper SSL Certificate Validation in Curl HTTP Client
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
Improper Certificate Validation
Overview hybridauth/hybridauth is a PHP Social Authentication Library Affected versions of this package are vulnerable to Improper Certificate Validation through the setCurlOptions processing in src/HttpClient/Curl.php. An attacker can intercept or tamper with HTTPS traffic by supplying malicious...
CVE-2026-4587
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
CVE-2026-4587
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
CVE-2026-4587
CVE-2026-4587 affects HybridAuth up to 3.12.2. The issue involves improper certificate validation caused by manipulation of curlOptions in src/HttpClient/Curl.php of the SSL Handler. Exploitation can be remote and the attack has high complexity; no public exploit details or impact beyond the desc...
CVE-2026-4587 HybridAuth SSL Curl.php certificate validation
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...
CVE-2026-4587 HybridAuth SSL Curl.php certificate validation
A vulnerability was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation. The attack can be launched remotely. This...