CVE-2026-54686-poc

CVE-2026-54686: PoC لتزوير خطاف دورة حياة DCS في Warp English version ملخص هذا المستودع هو PoC محلي آمن لـ CVE-2026-54686 استنادًا إلى نشرة Warp العامة GHSA-9w2v-jhww-vm85. الإصدارات السابقة من Warp لم تتحقق مما إذا كانت بعض خطافات دورة حياة DCS التي تغير الحالة القادمة من تيار PTY قد أُرسلت من...

CVE-2026-35452

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin. The log contains internal filesyste...

CVE-2026-35452 WWBN AVideo has Unauthenticated Information Disclosure via Missing Auth on CloneSite client.log.php

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin. The log contains internal filesyste...

GHSA-99J6-HJ87-6FCF AVideo: Unauthenticated Information Disclosure via Missing Auth on CloneSite client.log.php

Summary The plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin. The log contains internal filesystem paths, remote server URLs, and SSH connection metadata. Details...