Skip to contentWwbn vulnerabilities
Newest
- wwbn avideoWWBN AVideo Server-Side Request Forgery via set_api_userImagesCVE-2026-851647.1 High
- wwbn avideoAVideo Server-Side Request Forgery via epg_link parameterCVE-2026-851637.1 High
- wwbn avideoAVideo through c91b5975d CSRF via saveLive.phpCVE-2026-851627.1 High
- wwbn avideoAVideo removePoster.php Cross-Site Request Forgery File DeletionCVE-2026-851615.3 Medium
- wwbn avideoAVideo through c91b5975d CSRF and Path Traversal via stopLive.phpCVE-2026-851607.2 High
- wwbn avideoAVideo Reflected XSS via cancelUri in userLogin.phpCVE-2026-851595.3 Medium
- wwbn avideoAVideo Reflected XSS via videoEmbeded.php link parameterCVE-2026-851585.3 Medium
- wwbn avideoWWBN AVideo Broken Access Control via feed/index.php program_idCVE-2026-851576.9 Medium
- wwbn avideoWWBN AVideo Broken Access Control via Channel PageCVE-2026-851566.9 Medium
- wwbn avideoWWBN AVideo SQL Injection via get.json.php APIName channelsCVE-2026-851558.7 High
- wwbn avideoWWBN AVideo Authentication Bypass via Non-Expiring video_id_hashCVE-2026-851549.3 Critical
- wwbn avideoWWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.phpCVE-2026-844836.9 Medium
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via get_domain() validationCVE-2026-844828.7 High
- wwbn avideoWWBN AVideo through 30.0 Information Disclosure via MobileManagerCVE-2026-844816.9 Medium
- wwbn avideoWWBN AVideo Password Recovery Token Expiration BypassCVE-2026-844809.3 Critical
- wwbn avideoWWBN AVideo Authentication Bypass via User-Agent HeaderCVE-2026-844799.3 Critical
- wwbn avideoWWBN AVideo Unauthenticated Arbitrary Log File DeletionCVE-2026-844786.9 Medium
- wwbn avideoAVideo Stored XSS via Live Schedule Title DescriptionCVE-2026-844775.1 Medium
- wwbn avideoWWBN AVideo Authentication Bypass via X-Real-IP HeaderCVE-2026-844768.7 High
- wwbn avideoAVideo User_Location Plugin Unauthenticated SQL InjectionCVE-2026-842088.7 High
- wwbn avideoAVideo on_publish.php Missing Authentication Check via RTMP CallbackCVE-2026-841878.8 High
- wwbn avideoAVideo Cross-Site Request Forgery via plugin/API/set.json.phpCVE-2026-835957.2 High
- wwbn avideoWWBN AVideo SSRF Filter Bypass via NAT64 Hex AddressCVE-2026-826487.1 High
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via sendEmail.json.phpCVE-2026-826475.3 Medium
- wwbn avideoWWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.phpCVE-2026-826465.3 Medium
- wwbn avideoAVideo Unauthenticated Stream Credential Disclosure via Forgeable TokenCVE-2026-826459.2 Critical
- wwbn avideoWWBN AVideo Brute-force Rate Limiting Bypass via Missing User-AgentCVE-2026-826448.7 High
- wwbn avideoWWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.phpCVE-2026-826436.9 Medium
- wwbn avideoWWBN AVideo through 30.0 CSRF via myLiveControls.save.json.phpCVE-2026-817335.1 Medium
- wwbn avideoWWBN AVideo through 30.0 Information Disclosure via report4.json.phpCVE-2026-817326.9 Medium
- wwbn avideoAVideo SSRF Guard Bypass via IPv6 Transition AddressesCVE-2026-816786.9 Medium
- wwbn avideoAVideo Authentication Bypass via Unkeyed Video Hash DisclosureCVE-2026-598088.7 High
- wwbn avideoWWBN AVideo Unbound Token Authorization Bypass via GalleryCVE-2026-592568.7 High
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.phpCVE-2026-580037.1 High
- wwbn avideoWWBN AVideo Authorization Bypass via Users_affiliations add.json.phpCVE-2026-580027.1 High
- wwbn avideoWWBN AVideo Cross-Site Request Forgery via videoEditLight.phpCVE-2026-580016.9 Medium
- wwbn avideoAVideo channelToGallery.json.php Cross-Site Request ForgeryCVE-2026-579445.3 Medium
- wwbn avideoAVideo feed/index.php Exposure of Channel Owner Email AddressCVE-2026-563806.9 Medium
- wwbn avideoAVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.phpCVE-2026-727486.9 Medium
- wwbn avideoAVideo Stored Cross-Site Scripting via Unauthenticated RegistrationCVE-2026-727475.1 Medium
- wwbn avideoAVideo Encoder downloadURL SSRF via unpinned retry fallbackCVE-2026-646265.3 Medium
- wwbn avideoAVideo before 29.0 OS Command Injection via execAsyncCVE-2026-646259.3 Critical
- wwbn avideoAVideo through 29.0 OS Command Injection via ffmpeg.json.phpCVE-2026-633059.2 Critical
- wwbn avideoAVideo through 29.0 OS Command Injection via listFFmpegProcessesCVE-2026-633049.2 Critical
- wwbn avideoAVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sinkCVE-2026-551738.1 High
- wwbn avideoAVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment DataCVE-2026-33731Fix available6.5 Medium
- wwbn avideoAVideo Has Unauthenticated .env File Exposure via Official Docker Compose ConfigurationCVE-2026-33692Fix available7.5 High
- wwbn avideoAVideo's Privilege AVideo: Escalation via Unguarded Permission Parameters in signUp API Allows Self-Granting Upload/Stream/Meet PermissionsCVE-2026-33684Fix available5.3 Medium
- avideoAVideo - Server-Side Request Forgery in Live/test.php via statsURL ParameterCVE-2026-563426.1 Medium
- wwbn avideoAVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket PluginCVE-2026-54458Fix available9.6 Critical
- Show moreLoading…