https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:39:56 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-88870 <p>WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF token validation. Attackers can craft malicious pages with image tags pointing to savePublicKey.json.php to replace a logged-in victim&#39;s PGP 2FA public key, causing lockout or enabling account takeover if the attacker knows the password.</p> <p>WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF token validation. Attackers can craft malicious pages with image tags pointing to savePublicKey.json.php to replace a logged-in victim&#39;s PGP 2FA public key, causing lockout or enabling account takeover if the attacker knows the password.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-88870 https://vulnerability.circl.lu/vuln/ghsa-92c4-4j7c-jw78 <p>WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF token validation. Attackers can craft malicious pages with image tags pointing to savePublicKey.json.php to replace a logged-in victim&#39;s PGP 2FA public key, causing lockout or enabling account takeover if the attacker knows the password.</p> <p>WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the LoginControl plugin PGP key endpoints that lack CSRF token validation. Attackers can craft malicious pages with image tags pointing to savePublicKey.json.php to replace a logged-in victim&#39;s PGP 2FA public key, causing lockout or enabling account takeover if the attacker knows the password.</p> https://vulnerability.circl.lu/vuln/ghsa-92c4-4j7c-jw78