CVE-2026-34245 AVideo's Missing Authorization in Playlist Schedule Creation Allows Cross-User Broadcast Hijacking

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the plugin/PlayLists/View/Playlistsschedules/add.json.php endpoint allows any authenticated user with streaming permission to create or modify broadcast schedules targeting any playlist on the platform, regardless...

CVE-2026-34245

WWBN AVideo is affected by CVE-2026-34245: in versions up to 26.0, the endpoint plugin/PlayLists/View/Playlists_schedules/add.json.php allows any authenticated user with streaming permission to create/modify broadcast schedules for any playlist, regardless of ownership. When a scheduled rebroadca...

CVE-2026-2833

An HTTP request smuggling vulnerability CWE-444 was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing an Upgrade header, causing the proxy to pass through the rest of the bytes on the connection to a backend before the...

EUVD-2015-5368

Malware in sbrugna...

EUVD-2013-3474

Malware in sbrugna...

EUVD-2013-3895

Malware in sbrugna...

EUVD-2013-3475

Malware in sbrugna...

EUVD-2019-13052

Malware in sbrugna...

EUVD-2020-11778

Malware in sbrugna...

EUVD-2020-11779

Malware in sbrugna...

EUVD-2009-4791

Malware in sbrugna...

EUVD-2011-4044

Malware in sbrugna...

EUVD-2012-2693

Malware in sbrugna...

EUVD-2013-3407

Malware in sbrugna...

EUVD-2015-5401

Malware in sbrugna...

EUVD-2015-4304

Malware in sbrugna...

EUVD-2015-4405

Malware in sbrugna...

EUVD-2016-7340

Malware in sbrugna...

EUVD-2020-11777

Malware in sbrugna...

EUVD-2003-0731

Malware in sbrugna...