MMacWarrior

Products

Exploited and recent CVEs

• CVE-2026-110627 Medium 4.7 ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter 0.4%
• CVE-2026-110626 Medium 6.1 ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php 0.4%
• CVE-2026-110625 Medium 6.1 ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php 0.4%
• CVE-2026-103766 High 7.2 ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter 0.5%
• CVE-2026-102570 Medium 5.5 ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter 0.3%
• CVE-2026-102569 Medium 5.5 ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter 0.3%
• CVE-2026-100372 High 7.2 ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php 1.1%
• CVE-2026-96272 High 7.5 ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php 0.4%
• CVE-2026-95812 Medium 6.1 ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters 0.4%
• CVE-2026-77929 High 8.8 ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint 0.9%
• CVE-2026-77928 Medium 6.5 ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint 0.4%
• CVE-2026-77927 Medium 6.5 ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint 0.4%
• CVE-2026-80138 Critical 9.8 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter 1.2%
• CVE-2026-49482 Medium 4.3 ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite 0.2%
• CVE-2026-47238 Medium 6.5 ClipBucket: IDOR in videos subtitle editor 0.2%
• CVE-2026-45060 Critical 9.8 ClipBucket: Blind SQL Injection in progress_video.php 0.4%
• CVE-2026-42846 Critical 9.8 ClipBucket: Remote Play URL Command Injection 0.7%
• CVE-2026-45418 High 8.8 ClipBucket: Blind SQL Injection in subtitle_edit.php 0.4%
• CVE-2026-42847 High 7.1 ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 0.2%
• CVE-2026-32321 High 8.8 ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration 0.4%
• CVE-2026-28354 Medium 5.7 ClipBucket v5 has IDOR in Collection Item Management 0.3%
• CVE-2026-26997 Low 2.0 ClipBucket v5 has Stored XSS via Collection name 0.2%
• CVE-2026-26005 Medium 5.0 ClipBucket v5 enables internal network scans via an SSRF vulnerability 0.3%
• CVE-2026-25728 Critical 9.3 ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition 0.3%
• CVE-2026-21875 Critical 9.8 ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments 1.8%
• CVE-2025-64338 Medium 5.1 ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name 0.5%
• CVE-2025-65113 Medium 6.5 ClipBucket v5 Unauthenticated Object Flagging Vulnerability 0.4%
• CVE-2025-62709 Medium 6.8 ClipBucket v5 is vulnerable to password reset link manipulation 0.4%
• CVE-2025-64339 High 7.2 ClipBucket v5: Stored XSS Vulnerability in Manage Playlists 0.3%
• CVE-2025-64336 High 7.2 ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title 0.3%