Skip to content
OpenAdvisories

Vendor

MacWarrior

41 known vulnerabilities.

Products

clipbucket-v5 41
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-80138

    ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

    ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious php_cli_filepath value to exe…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2026-45060

    ClipBucket: Blind SQL Injection in progress_video.php

    ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php endpoint is vulnerable to blind SQL injection. Any unauthenticated user can exploit the ids parameter to execute SQL queries and exfiltrate s…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2026-42846

    ClipBucket: Remote Play URL Command Injection

    ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a para…

    MacWarrior clipbucket-v5
  • Critical 9.3
    CVE-2026-25728

    ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition

    ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability exists in ClipBucket's avatar and background image upload functionality. The application moves uploaded files to…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2026-21875 Scanner template

    ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

    ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to perform Blind SQL Injection through the add comment section within a channel. When adding a comment within a channel, there is a POST request to the /ac…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2025-21624

    ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

    ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2024-54135

    Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199

    ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 2.0 to Version 5.5.1 Revision 199 are vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/photo_upload.php within the decode_key function. User in…

    MacWarrior clipbucket-v5
  • Critical 9.8
    CVE-2024-54136

    Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

    ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get pa…

    MacWarrior clipbucket-v5