CVE-2024-54136

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.

• CWE-502

• https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0Patch
• https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78Exploit, Third Party Advisory

Published

Dec 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-54130The NASA’s Interplanetary Overlay Network (ION) is an implem…9.2
• CVE-2024-54131The Kolide Agent (aka: Launcher) is the lightweight agent de…7.3
• CVE-2024-54132The GitHub CLI is GitHub’s official command line tool. A sec…6.3
• CVE-2024-54133Action Pack is a framework for handling and responding to we…2.3
• CVE-2024-54134A publish-access account was compromised for `@solana/web3.j…8.3
• CVE-2024-54135ClipBucket V5 provides open source video hosting with PHP. C…8.8
• CVE-2024-54137liboqs is a C-language cryptographic library that provides i…7.5
• CVE-2024-54138NuGet Gallery is a package repository that powers nuget.org.…6.1
• CVE-2024-54139Combodo iTop is an open source and web-based IT service mana…9.6
• CVE-2024-5414A vulnerability have been discovered in PhpMyBackupPro affec…7.1
• CVE-2024-54140sigstore-java is a sigstore java client for interacting with…2.1
• CVE-2024-54141phpMyFAQ is an open source FAQ web application for PHP 8.1+ …7.5