Macwarrior vulnerabilities
41 CVEs and advisories name Macwarrior as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-110627ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter
- CVE-2026-110626ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php
- CVE-2026-110625ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php
- CVE-2026-103766ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter
- CVE-2026-102570ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter
- CVE-2026-102569ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter
- CVE-2026-100372ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
- CVE-2026-96272ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.php
- CVE-2026-95812ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
- CVE-2026-77929ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
- CVE-2026-77928ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint
- CVE-2026-77927ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint
- CVE-2026-80138ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter
- CVE-2026-49482ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite
- CVE-2026-47238ClipBucket: IDOR in videos subtitle editor
- CVE-2026-45060ClipBucket: Blind SQL Injection in progress_video.php
- CVE-2026-42846ClipBucket: Remote Play URL Command Injection
- CVE-2026-45418ClipBucket: Blind SQL Injection in subtitle_edit.php
- CVE-2026-42847ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CVE-2026-32321ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltration
- CVE-2026-28354ClipBucket v5 has IDOR in Collection Item Management
- CVE-2026-26997ClipBucket v5 has Stored XSS via Collection name
- CVE-2026-26005ClipBucket v5 enables internal network scans via an SSRF vulnerability
- CVE-2026-25728ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Condition
- CVE-2026-21875ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments
- CVE-2025-64338ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
- CVE-2025-65113ClipBucket v5 Unauthenticated Object Flagging Vulnerability
- CVE-2025-62709ClipBucket v5 is vulnerable to password reset link manipulation
- CVE-2025-64339ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
- CVE-2025-64336ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title