References https://nvd.nist.gov/vuln/detail/CVE-2025-34433 https://cve.imfht.com/detail/CVE-2025-34433 https://cve.scap.org.cn/vulnerability/VHN-344351 https://access.redhat.com/security/cve/cve-2025-34433 https://chocapikk.com/posts/2025/avideo-security-vulnerabilities/ https://github.com/Chocapikk/msf-exploit-collection/blob/main/documentation/modules/exploit/multi/http/avideo_notify_ffmpeg_unauth_rce.md https://github.com/advisories/GHSA-hv75-87h9-4p5h https://www.incibe.es/index.php/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-34433
Related VulnerabilitiesAVideo /plugin/API/get.json.php 文件包含漏洞(CVE-2026-33513)WWBN AVideo /objects/plugins.json.php 信息泄露漏洞 (CVE-2026-43885)PoCCVE-2026-33478: AVideo <= 26.0 - WWBN AVideo - Remote Code ExecutionAVideo /plugin/Live/test.php 服务器端请求伪造漏洞(CVE-2026-33502)Wwbn Avideo任意重定向漏洞(CVE-2025-34440)Wwbn Avideo敏感系统信息暴露给未经授权的控制领域漏洞(CVE-2025-34442)Wwbn Avideo权限绕过漏洞(CVE-2025-34438)Wwbn Avideo任意重定向漏洞(CVE-2025-34439)Wwbn Avideo向未经授权的行为者暴露私人个人信息漏洞(CVE-2025-34441)Wwbn Avideo权限绕过漏洞(CVE-2025-34437)Wwbn Avideo权限绕过漏洞(CVE-2025-34436)Wwbn Avideo权限绕过漏洞(CVE-2025-34435)Wwbn Avideo缺少关键功能的身份验证漏洞(CVE-2025-34434)