https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:26:46.635254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-34437 CVE-2025-34437 — AVideo < 20.1 IDOR Arbitrary Comment Image Upload 2026-10-06T04:26:46.651013+00:00

Affected: World Wide Broadcast Network AVideo

AVideo versions prior to 20.1 permit any authenticated user to upload comment images to videos owned by other users. The endpoint validates authentication but omits ownership checks, allowing attackers to perform unauthorized uploads to arbitrary video objects.