{"vulnerability": "cve-2026-6330", "sightings": [{"uuid": "230e9c7a-15ec-4fee-a504-25bd52ea687b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63308", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrv473bjqy24", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-63308](https://github.com/helm/helm/commit/ba6c9a29efa7bf9198dad6a5ec12b4fb30c96017)\nHe...\nhttps://github.com/helm/helm/commit/ba6c9a29efa7bf9198dad6a5ec12b4fb30c96017 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-30T18:50:03.836450Z"}, {"uuid": "fd63ef99-28c7-4653-983b-bcfda7221e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63300", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvyxphr532b", "content": "CVE-2026-63300 - lxd\nAn attacker with permission to create instances in one project can move a specially crafted instance to another project, potentially executing arbitrary commands. This can happen if an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-12T20:50:04.909111Z"}, {"uuid": "d8676914-7d59-4f1d-9670-4a52d992ead0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5hvwozge27", "content": "CVE-2026-6330 - ML-KEM ARM64 NEON ciphertext comparison only compares half of the input\nCVE ID : CVE-2026-6330\n \n Published : June 25, 2026, 9:01 p.m. | 43\u00a0minutes ago\n \n Description : The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fu...", "creation_timestamp": "2026-06-25T22:25:23.317684Z"}, {"uuid": "83ba766c-2600-43bb-b483-7c63cc9c2666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63305", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116929896586145034", "content": "CRITICAL: CVE-2026-63305 impacts WWBN AVideo \u226429.0. OS command injection in ffmpeg.json.php allows arbitrary command execution as the web-server user. No patch yet \u2014 restrict access & monitor logs. Details: https://radar.offseq.com/threat/cve-2026-63305-improper-neutralization-of-special--2152563144062b29 #OffSeq #Vuln #WWBN #CVE202663305", "creation_timestamp": "2026-07-16T13:30:27.831080Z"}, {"uuid": "8538d743-9165-468c-98f2-c6aa950a07b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-63305", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z", "content": "WWBN AVideo \u226429.0 is affected by a CRITICAL (CVSS 9.2) OS command injection (CVE-2026-63305). Restrict ffmpeg.json.php access & monitor for suspicious activity until a patch is available. https://radar.offseq.com/threat/cve-2026-63305-improper-neutralization-of-special--2152563144062b29 #OffSeq #...", "creation_timestamp": "2026-07-16T13:30:30.763641Z"}, {"uuid": "2f16ee9b-a429-48b0-ac25-d93f12da497e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63304", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrehkrzjo2w", "content": "CVE-2026-63304\nAVideo versions up to 29.0 are vulnerable to a security risk that allows attackers to execute system commands with the same privileges as the web server. This means an attacker could potentially access or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T13:42:06.120123Z"}, {"uuid": "a1bf6183-6e5d-4203-bb82-b80805647f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63305", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrel3xc7x2o", "content": "CVE-2026-63305\nAVideo versions up to 29.0 have a security flaw that allows attackers to execute system commands. This can be exploited by sending specially crafted data to the ffmpeg.json.php endpoint. To protect your system,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T13:44:04.967576Z"}, {"uuid": "eed7867f-b97d-4424-8c60-920177d93271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63306", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqrel5f6pq2l", "content": "CVE-2026-63306\nThe stoatchat software before version 0.13.5 has a security flaw that lets attackers find and access internal services on your network. This could happen if an attacker supplies a malicious URL or uses a series\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T13:44:06.618961Z"}, {"uuid": "20fb024c-0f56-4f03-ab7b-12ae736c424b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrijfgqcq2h", "content": "CVE-2026-63306 - stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints\nCVE ID : CVE-2026-63306\n \n Published : July 16, 2026, 1:16 p.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : stoatchat before 0.13.5 contains an unauthenticated server-side request forgery...", "creation_timestamp": "2026-07-16T14:54:42.636587Z"}, {"uuid": "0f54c3d7-82c0-45ff-91b5-b7212aaba6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrjg32vln2m", "content": "CVE-2026-63304 - AVideo through 29.0 OS Command Injection via listFFmpegProcesses\nCVE ID : CVE-2026-63304\n \n Published : July 16, 2026, 1:16 p.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlo...", "creation_timestamp": "2026-07-16T15:10:44.875606Z"}, {"uuid": "33359741-2a95-4e03-b83c-02485ebea053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63305", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrjozn2vn2w", "content": "CVE-2026-63305 - AVideo through 29.0 OS Command Injection via ffmpeg.json.php\nCVE ID : CVE-2026-63305\n \n Published : July 16, 2026, 1:16 p.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php end...", "creation_timestamp": "2026-07-16T15:15:45.509292Z"}, {"uuid": "fa092466-7606-4a55-ac68-18ed0b9eba31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63303", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-63301", "content": "", "creation_timestamp": "2026-07-28T16:15:03.772995Z"}, {"uuid": "d3c68386-f31e-4e46-a20f-57a985f5bc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63301", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-63301", "content": "", "creation_timestamp": "2026-07-28T16:15:06.362040Z"}, {"uuid": "be647361-77eb-4d4d-9b04-cebdb822ec61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63302", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-63301", "content": "", "creation_timestamp": "2026-07-28T16:45:05.356616Z"}]}