CVE-2025-62429

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is not performed, and by injecting malicious code an attacker can execute arbitrary PHP code. This allows an attacker to achieve RCE. This issue has been resolved in version 5.5.2 #147.

• CWE-94

• https://github.com/MacWarrior/clipbucket-v5/commit/e81bac602c871bb1ad971884003a3a496a2ab50bPatch
• https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.2-%23147Release Notes
• https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmqExploit, Vendor Advisory
• https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3x4g-x3gv-rjmqExploit, Vendor Advisory

Published

Oct 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62423ClipBucket V5 provides open source video hosting with PHP. I…7.2
• CVE-2025-62424ClipBucket is a web-based video-sharing platform. In ClipBuc…6.5
• CVE-2025-62425MAS (Matrix Authentication Service) is a user management and…8.3
• CVE-2025-62426vLLM is an inference and serving engine for large language m…6.5
• CVE-2025-62427The Angular SSR is a server-rise rendering tool for Angular …8.7
• CVE-2025-62428Drawing-Captcha APP provides interactive, engaging verificat…8.8
• CVE-2025-62430ClipBucket v5 is an open source video sharing platform. Clip…5.4
• CVE-2025-62439An Improper Verification of Source of a Communication Channe…4.2
• CVE-2025-6244The Essential Addons for Elementor – Popular Elementor Templ…5.4
• CVE-2025-62440Rejected reason: Not used
• CVE-2025-62441Rejected reason: Not used
• CVE-2025-62442Rejected reason: Not used