CVE-2026-33483 AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the aVideoEncoderChunk.json.php endpoint is a completely standalone PHP script with no authentication, no framework includes, and no resource limits. An unauthenticated remote attacker can send arbitrary POST data...

CVE-2026-33483

CVE-2026-33483 affects WWBN AVideo up to version 26.0. The endpoint aVideoEncoderChunk.json.php is unauthenticated, outside the framework, and writes POST data to permanent files in /tmp with no size limits or cleanup, enabling disk-space exhaustion and potential denial of service. Public documen...

CVE-2026-33690

creationtimestamp| type| source ---|---|--- 2026-03-23 13:31:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-8p2x-5cpm-qrqw 2026-03-23 20:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqwy75wkv2g 2026-03-25 21:34:33+00:00| seen|...

USN-8115-1 pyopenssl vulnerabilities

It was discovered that pyOpenSSL incorrectly handled exceptions in the tlsextservername callback. This could result in connections being accepted after an exception, contrary to expectations. CVE-2026-27448 It was discovered that pyOpenSSL incorrectly handled the DTLS cookie generation callback. ...

CVE-2026-33681

creationtimestamp| type| source ---|---|--- 2026-03-23 12:37:14+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-3hwv-x8g3-9qpr 2026-03-23 20:17:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhquvwdqp42d 2026-03-24 01:43:11+00:00| seen|...

CVE-2026-4584

creationtimestamp| type| source ---|---|--- 2026-03-23 12:32:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq2wp7loq2u...

CVE-2026-4575

creationtimestamp| type| source ---|---|--- 2026-03-23 12:28:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhq2pzbq3k2n...

CVE-2026-4576

creationtimestamp| type| source ---|---|--- 2026-03-23 12:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpzv5ydss2o...

CVE-2026-4573

creationtimestamp| type| source ---|---|--- 2026-03-23 12:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpzm7jxqb2e...

CVE-2016-20026

creationtimestamp| type| source ---|---|--- 2026-03-23 11:38:11+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mhpxw437qy2o...

CVE-2026-33670

creationtimestamp| type| source ---|---|--- 2026-03-23 11:09:58+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xmw9-6r43-x9ww 2026-03-23 11:09:58+00:00| published-proof-of-concept|...

CVE-2026-22901

creationtimestamp| type| source ---|---|--- 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...

CVE-2026-3736

creationtimestamp| type| source ---|---|--- 2026-03-23 10:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhpsgy2ttp2h...

CVE-2026-3587

creationtimestamp| type| source ---|---|--- 2026-03-23 08:02:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/116277439434054031 2026-03-23 08:02:11+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mhplts73kmm2 2026-03-23 08:17:02+00:00| seen|...

CVE-2026-4600

creationtimestamp| type| source ---|---|--- 2026-03-23 06:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhpi3iqjyc2e 2026-03-24 06:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhrvirfmhx2p...

CVE-2026-4601

creationtimestamp| type| source ---|---|--- 2026-03-23 06:49:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhphskdlhb2e 2026-03-23 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116277315523815630 2026-03-23 07:30:34+00:00| seen|...

EUVD-2026-14363

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-4573

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

CVE-2026-30886

creationtimestamp| type| source ---|---|--- 2026-03-23 05:58:29+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-f35r-v9x5-r8mc 2026-03-23 19:16:25+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30886...

cpython: POP3 command injection in user-controlled commands

A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...