CVE-2026-85157

WWBN AVideo is affected by a broken access control vulnerability in the unauthenticated feed/index.php (RSS feed) endpoint. When a program_id parameter is supplied, per-video visibility checks are disabled, allowing unauthenticated attackers to enumerate playlist identifiers and retrieve unlisted...

PT-2025-35448

Name of the Vulnerable Software and Affected Versions: Campcodes Online Feeds Product Inventory System version 1.0 Description: A security vulnerability exists in Campcodes Online Feeds Product Inventory System 1.0. The vulnerability affects unknown code within the /feeds/index.php file of the...