https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:05:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19075 <p><strong>Affected:</strong> Unknown All-in-One Video Gallery</p> <p>All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=&lt;post_id&gt;` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video::download_video()`), which reads the post&#39;s `mp4` meta value and streams that URL&#39;s response back to the requester.</p> <p><strong>Affected:</strong> Unknown All-in-One Video Gallery</p> <p>All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=&lt;post_id&gt;` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video::download_video()`), which reads the post&#39;s `mp4` meta value and streams that URL&#39;s response back to the requester.</p> https://vulnerability.circl.lu/vuln/cve-2026-19075