CVE-2026-34458

creationtimestamp| type| source ---|---|--- 2026-05-05 20:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml537ce7c32i 2026-05-06 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116524688383360552 2026-05-06 00:00:43+00:00| seen|...

CVE-2026-33975

creationtimestamp| type| source ---|---|--- 2026-05-05 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52mdhzw52p...

CVE-2026-44331

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z4tbpat2g 2026-05-05 20:48:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml52qhxja22n 2026-05-06 07:49:10+00:00| seen|...

Cross-site Request Forgery (CSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the userSavePhoto.php process. An attacker can overwrite authenticated users' profile photos with arbitrary content and trigger...

GHSA-JW8G-5J46-44RP AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Authenticated Users' Profile Photos with Arbitrary Content

Summary objects/userSavePhoto.php is a legacy profile-photo endpoint that accepts a base64 POST parameter and writes the decoded bytes to videos/userPhoto/photo.png. Its only access control is User::isLogged. It does not end in .json.php, so it is excluded from the project's global autoCSRFGuard...

AVideo: CSRF in userSavePhoto.php Allows Cross-Origin Overwrite of Authenticated Users' Profile Photos with Arbitrary Content

Summary objects/userSavePhoto.php is a legacy profile-photo endpoint that accepts a base64 POST parameter and writes the decoded bytes to videos/userPhoto/photo.png. Its only access control is User::isLogged. It does not end in .json.php, so it is excluded from the project's global autoCSRFGuard...

CVE-2026-7846

creationtimestamp| type| source ---|---|--- 2026-05-05 17:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4pjxmtb42q...

CVE-2026-7845

creationtimestamp| type| source ---|---|--- 2026-05-05 17:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4paz6c6m2i...

CVE-2026-43062

creationtimestamp| type| source ---|---|--- 2026-05-05 17:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4oy2pb6d2i 2026-08-03 06:23:29+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-44197

creationtimestamp| type| source ---|---|--- 2026-05-05 17:10:08+00:00| seen| https://bsky.app/profile/releaseport.com/post/3ml4ojbbx3a2u...

CVE-2026-32689

creationtimestamp| type| source ---|---|--- 2026-05-05 17:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nxphuoq2k 2026-05-08 20:40:28+00:00| seen| https://gist.github.com/alon710/bf727aea4f480d1e2e016713a2841996...

CVE-2026-43067

creationtimestamp| type| source ---|---|--- 2026-05-05 16:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mxfrwuy2h...

CVE-2026-43061

creationtimestamp| type| source ---|---|--- 2026-05-05 16:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4ml2gr2p2r 2026-08-03 06:54:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-7412

creationtimestamp| type| source ---|---|--- 2026-05-05 16:31:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mendjbd2n 2026-05-05 18:38:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4thzoejw2q...

CVE-2026-25243

creationtimestamp| type| source ---|---|--- 2026-05-05 15:45:36+00:00| seen| https://bsky.app/profile/adhisimon.kodesumber.com.ap.brid.gy/post/3ml4jrsfmvc32 2026-05-06 13:14:15+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116527808793446441 2026-05-06 13:14:43+00:00|...

CVE-2026-5766

creationtimestamp| type| source ---|---|--- 2026-05-05 15:43:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jpaa4lk2m...

CVE-2026-43002

creationtimestamp| type| source ---|---|--- 2026-05-05 15:38:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jgb2lgf2i...

CVE-2026-42439

creationtimestamp| type| source ---|---|--- 2026-05-05 15:15:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4i4rbxlk2c 2026-05-07 04:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mladoxwkya2y...

CVE-2023-54348

creationtimestamp| type| source ---|---|--- 2026-05-05 14:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gbltfn42h...

CVE-2026-6918

creationtimestamp| type| source ---|---|--- 2026-05-05 14:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4fmtegma2p 2026-05-05 20:20:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z52m2ao2k...