CVE-2026-126814

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

CVE-2026-126814 blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube Matcher

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

CVE-2026-126814

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

CVE-2026-126814

blueprintUE Self-Hosted Edition versions before 4.3.6 are vulnerable to an iframe injection vulnerability. The root cause lies in the PeerTube video URL matcher within the BlueprintService::findVideoProvider() function. An authenticated user can provide a video URL pointing to an attacker-control...

EUVD-2026-124029

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

CVE-2026-126814 blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube Matcher

blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider. Attackers can set a blueprint video URL on an...

Malicious code in peertube-plugin-video-views-counter (npm)

Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'd, executing whenever PeerTube loads the plugin module. Th...

Malicious Package

Overview peertube-plugin-video-views-counter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

MAL-2026-15902 Malicious code in peertube-plugin-video-views-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...

Malicious code in peertube-plugin-video-views-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62f93ab1a8cfa1b153c8075e6463d3351c16a49779615556c7ee2fc909fdcde plugin.js contains a top-level IIFE that spawns bash with a /dev/tcp reverse-shell loop to the hardcoded host 45.137.222.44:4444, detached and unref'...

Malicious Package

Overview peertube-plugin-poc-marker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in peertube-plugin-poc-marker (npm)

Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the combined stdout as JSON to the hardcoded bare-IP collector...

Malicious code in peertube-plugin-poc-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...

MAL-2026-15817 Malicious code in peertube-plugin-poc-marker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff307f6227ac4a9217a899b419a6931ddfe0376cb0cc6ba3570c0f589247241c index.js runs id; uname -a; hostname; date -u; ls -d /var/www/peertube via execSync when PeerTube invokes the plugin's register hook, then POSTs the...

CVE-2026-73211

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including...

CVE-2026-73090

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id, allowing a malicious federated server...

CVE-2026-73211

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including...

CVE-2026-73211

PeerTube (ActivityPub-federated video platform) pre-8.1.6 is affected by an unauthenticated remote SQL injection in ActorFollowModel.updateScore(), where the attacker-controlled inboxUrl is interpolated into an SQL query. This allows reading and writing of database tables, including oAuthToken.ac...

CVE-2026-73211 PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including...

CVE-2026-73211 PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()

PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including...