Skip to content
OpenAdvisories

Vendor

World Wide Broadcast Network

10 known vulnerabilities.

Products

AVideo 10
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-34433 Public exploit

    AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt

    AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The installation timestamp is exposed via a public endpoint, and a derived hash id…

    World Wide Broadcast Network AVideo
  • Medium 6.9
    CVE-2025-34442 Public exploit

    AVideo < 20.1 System Path Disclosure via Public API

    AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains.

    World Wide Broadcast Network AVideo
  • Medium 6.9
    CVE-2025-34441 Public exploit

    AVideo < 20.1 User Information Disclosure via Public API

    AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.

    World Wide Broadcast Network AVideo