CVE-2026-4062

creationtimestamp| type| source ---|---|--- 2026-05-05 22:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3ml5akrpkkh2c...

CVE-2026-30923

creationtimestamp| type| source ---|---|--- 2026-05-05 22:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml57em74tm2t 2026-05-06 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/modsecurity-denial-of-service-vulnerability20260507...

CVE-2026-33324

creationtimestamp| type| source ---|---|--- 2026-05-05 21:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56apcdmp2q 2026-05-06 03:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml5piwum6i2f 2026-05-06 03:00:48+00:00| seen|...

CVE-2026-32934

creationtimestamp| type| source ---|---|--- 2026-05-05 21:38:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml55jcl3da2v...

CVE-2026-36365

creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ep5r6g2n...

CVE-2026-40682

creationtimestamp| type| source ---|---|--- 2026-05-05 21:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml53ehoq2x2t...

CVE-2026-34458

creationtimestamp| type| source ---|---|--- 2026-05-05 20:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml537ce7c32i 2026-05-06 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116524688383360552 2026-05-06 00:00:43+00:00| seen|...

CVE-2026-33975

creationtimestamp| type| source ---|---|--- 2026-05-05 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52mdhzw52p...

CVE-2026-44331

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z4tbpat2g 2026-05-05 20:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52qhxja22n 2026-05-06 07:49:10+00:00| seen|...

GHSA-JW8G-5J46-44RP AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Authenticated Users' Profile Photos with Arbitrary Content

Summary objects/userSavePhoto.php is a legacy profile-photo endpoint that accepts a base64 POST parameter and writes the decoded bytes to videos/userPhoto/photo.png. Its only access control is User::isLogged. It does not end in .json.php, so it is excluded from the project's global autoCSRFGuard...

Cross-site Request Forgery (CSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the userSavePhoto.php process. An attacker can overwrite authenticated users' profile photos with arbitrary content and trigger...

AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Authenticated Users' Profile Photos with Arbitrary Content

Summary objects/userSavePhoto.php is a legacy profile-photo endpoint that accepts a base64 POST parameter and writes the decoded bytes to videos/userPhoto/photo.png. Its only access control is User::isLogged. It does not end in .json.php, so it is excluded from the project's global autoCSRFGuard...

CVE-2026-7846

creationtimestamp| type| source ---|---|--- 2026-05-05 17:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4pjxmtb42q...

CVE-2026-7845

creationtimestamp| type| source ---|---|--- 2026-05-05 17:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4paz6c6m2i...

CVE-2026-43062

creationtimestamp| type| source ---|---|--- 2026-05-05 17:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4oy2pb6d2i 2026-08-03 06:23:29+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-44197

creationtimestamp| type| source ---|---|--- 2026-05-05 17:10:08+00:00| seen| https://bsky.app/profile/releaseport.com/post/3ml4ojbbx3a2u...

CVE-2026-32689

creationtimestamp| type| source ---|---|--- 2026-05-05 17:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nxphuoq2k 2026-05-08 20:40:28+00:00| seen| https://gist.github.com/alon710/bf727aea4f480d1e2e016713a2841996...

CVE-2026-43067

creationtimestamp| type| source ---|---|--- 2026-05-05 16:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mxfrwuy2h...

CVE-2026-43061

creationtimestamp| type| source ---|---|--- 2026-05-05 16:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4ml2gr2p2r 2026-08-03 06:54:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-7412

creationtimestamp| type| source ---|---|--- 2026-05-05 16:31:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mendjbd2n 2026-05-05 18:38:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4thzoejw2q...