112863 matches found
EUVD-2026-16058
Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL...
CVE-2026-1001
creationtimestamp| type| source ---|---|--- 2026-03-25 21:49:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw2zrrx5k2q 2026-06-23 08:23:37+00:00| seen| https://gist.github.com/zanetworker/1c2f8d6638917ee25ed7da3865900455...
CVE-2026-33720
creationtimestamp| type| source ---|---|--- 2026-03-25 21:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhw2qtecjk25 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v...
AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL
Summary The downloadVideoFromDownloadURL function in objects/aVideoEncoder.json.php saves remote content to a web-accessible temporary directory using the original URL's filename and extension including .php. By providing an invalid resolution parameter, an attacker triggers an early die via...
Arbitrary File Upload
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Arbitrary File Upload through the downloadVideoFromDownloadURL function. A user with upload permissions can execute arbitrary code on the server by uploading a...
Server-side Request Forgery (SSRF)
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the streamerURL parameter in control.json.php. An attacker can gain unauthorized control over live streams by supplying a...
EUVD-2026-14502
AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the DownloadImage function when processing user avatar URLs from OpenID Connect authentication. An attacker can cause the server to make arbitrary HTTP requests to internal or cloud metadata endpoint...
Vikjuna: IDOR in Task Attachment ReadOne Allows Cross-Project File Access and Deletion
Summary TaskAttachment.ReadOne queries attachments by ID only WHERE id = ?, ignoring the task ID from the URL path. The permission check in CanRead validates access to the task specified in the URL, but ReadOne loads a different attachment that may belong to a task in another project. This allows...
CVE-2026-25447
creationtimestamp| type| source ---|---|--- 2026-03-25 21:16:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvz6j33pn2j 2026-03-25 23:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw6ymzy5d2s 2026-04-09 04:30:06+00:00| seen|...
CVE-2026-33660
creationtimestamp| type| source ---|---|--- 2026-03-25 20:57:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvy3y27xg2n 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v 2026-03-26 03:00:36+00:00| seen|...
CVE-2026-33663
creationtimestamp| type| source ---|---|--- 2026-03-25 20:44:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvxezllyl2o 2026-03-26 03:00:16+00:00| seen| https://github.com/n8n-io/n8n/security/advisories/GHSA-58qr-rcgv-642v 2026-03-26 08:43:53+00:00| seen|...
Server-side Request Forgery (SSRF)
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the statsURL parameter in the plugin/Live/test.php endpoint. An administrator can access sensitive internal resources and clou...
GHSA-WXJX-R2J2-96FX AVideo: Full-Read SSRF Through Unvalidated statsURL Parameter in plugin/Live/test.php
Summary The plugin/Live/test.php endpoint accepts a URL via the statsURL parameter and fetches it server-side using filegetcontents, curlexec, or wget, returning the full response content in the HTML output. The only validation is a trivial regex /^http/ that does not block requests to...
CVE-2026-3213
creationtimestamp| type| source ---|---|--- 2026-03-25 18:04:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvogjrf7e2s...
CVE-2026-23514
creationtimestamp| type| source ---|---|--- 2026-03-25 17:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvmm5ef2f2i 2026-03-26 01:45:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwi6sw6ra2x 2026-03-27 20:00:15+00:00| seen|...
CVE-2026-20719 DoS via URL Previews Rendering Malicious SVGs
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
CVE-2026-1519
creationtimestamp| type| source ---|---|--- 2026-03-25 15:56:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhvhbpmobd2v 2026-03-25 18:23:28+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-280 2026-03-25 20:03:03+00:00| seen|...
CVE-2026-3591
creationtimestamp| type| source ---|---|--- 2026-03-25 15:56:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhvhbpmobd2v 2026-03-25 18:23:28+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-280 2026-03-25 20:03:03+00:00| seen|...
CVE-2026-23921
creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r 2026-03-31 05:44:07+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3midhua6x3s22 2026-04-01 08:26:38+00:00| seen|...