https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:58:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-359363 EUVD-2026-359363 https://cve.radiocsirt.org/vuln/euvd-2026-359363 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58001 <p>WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled account when an administrator views the video page.</p> <p>WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled account when an administrator views the video page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58001 https://cve.radiocsirt.org/vuln/ghsa-6g67-433v-cf8h <p>WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled account when an administrator views the video page.</p> <p>WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts GET requests. Attackers can store an img tag in a video description that transfers video ownership to an attacker-controlled account when an administrator views the video page.</p> https://cve.radiocsirt.org/vuln/ghsa-6g67-433v-cf8h