CyberSecBulletin

Evil0ctal vulnerabilities

We track 1 vulnerability in Evil0ctal products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Evil0ctal vulnerabilities

  • 7.5 High severity

    Douyin_TikTok_Download_API: Server-Side Request Forgery

    CVE-2026-85608Evil0ctal

    Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download and /api/hybrid/video_data endpoints that allows unauthenticated attackers to fetch arbitrary URLs by supplying a url query parameter. Attackers