exploit/multi/http/avideo_notify_ffmpeg_unauth_rce
waffenfähigAVideo notify.ffmpeg.json.php Unauthenticated RCE via Salt Discovery
01
ausgenutzte CVEs (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-34433US | — | Exploit | ||
AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The… | ||||
| CVE-2025-34442US | high7.5 | Exploit | ||
AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlyin… | ||||
| CVE-2025-34441US | high7.5 | Exploit | ||
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan