CVE-2022-30534

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-78

• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1546Technical Description, Third Party Advisory
• https://github.com/WWBN/AVideo/blob/e04b1cd7062e16564157a82bae389eedd39fa088/updatedb/updateDb.v12.0.sqlThird Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1546Technical Description, Third Party Advisory

Published

Aug 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30529File upload vulnerability in asith-eranga ISIC tour booking …7.2
• CVE-2022-3053Inappropriate implementation in Pointer Lock in Google Chrom…4.3
• CVE-2022-30530Protection mechanism failure in the Intel(R) DSA software be…7.8
• CVE-2022-30531Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers fo…5.5
• CVE-2022-30532In affected versions of Octopus Deploy, there is no logging …5.3
• CVE-2022-30533Cross-site scripting vulnerability in Modern Events Calendar…5.4
• CVE-2022-30535In versions 2.x before 2.3.0 and all versions of 1.x, An att…6.5
• CVE-2022-30536Authenticated Stored Cross-Site Scripting (XSS) vulnerabilit…4.8
• CVE-2022-30537Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-30538Out-of-bounds write vulnerability exists in the simulator mo…7.8
• CVE-2022-30539Use after free in the BIOS firmware for some Intel(R) Proces…6.7
• CVE-2022-3054Insufficient policy enforcement in DevTools in Google Chrome…6.5