GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
6.6M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-82645: Avideo Insecure Decrypt String Intvalcve-2026-82645-avideo-insecure-decrypt-string-intval

Directly converting decrypted token strings to integers using intval() without validating that the plaintext strictly contains digits allows forged or spliced CBC ciphertexts to bypass authentication/authorization checks.

PHPCVE-2026-82645CWE-20CWE-287CWE-347
by Provallyupdated 2026-09-02Apache-2.0
1090 direct109 via packs
74
All matching rules loaded.