Protect Web Society

CVE-2026-33804 - @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-33804 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : @fa…

CVE-2026-30656 - "Fio NULL Pointer Dereference Vulnerability"

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-30656 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : A N…

CVE-2026-30459 - Daylight Studio FuelCMS Password Reset Token Disclosure

Maloy Roy Orko April 16, 2026

CVE ID : CVE-2026-30459 Published : April 16, 2026, 3:17 p.m. | 53 minutes ago Description : An …

CVE-2026-20059 - Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability

Maloy Roy Orko April 15, 2026

CVE ID : CVE-2026-20059 Published : April 15, 2026, 5:17 p.m. | 59 minutes ago Description : A v…

CVE-2026-32225 - Windows Shell Security Feature Bypass Vulnerability

Maloy Roy Orko April 14, 2026

CVE ID : CVE-2026-32225 Published : April 14, 2026, 4:58 p.m. | 1 hour ago Description : None S…

CVE-2025-63743 - Snipe-IT Cross-Site Scripting (XSS)

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2025-63743 Published : April 13, 2026, 4:16 p.m. | 53 minutes ago Description : Cro…

CVE-2025-31991 - HCL DevOps Velocity is susceptible to brute-force attacks

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2025-31991 Published : April 13, 2026, 4:16 p.m. | 53 minutes ago Description : Rat…

CVE-2026-6190 - itsourcecode Construction Management System employees.php sql injection

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2026-6190 Published : April 13, 2026, 4:15 p.m. | 54 minutes ago Description : A vu…

CVE-2026-6189 - SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

Maloy Roy Orko April 13, 2026

CVE ID : CVE-2026-6189 Published : April 13, 2026, 4 p.m. | 1 hour, 9 minutes ago Description : …

CVE-2026-40393 - Mesa WebGPU Out-of-Bounds Memory Access Vulnerability

Maloy Roy Orko April 12, 2026

CVE ID : CVE-2026-40393 Published : April 12, 2026, 7:16 p.m. | 1 hour, 52 minutes ago Descripti…

CVE-2026-6107 - 1Panel-dev MaxKB ChatHeadersMiddleware chat_headers_middleware.py cross site scripting

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-6107 Published : April 12, 2026, 1:16 a.m. | 1 hour, 52 minutes ago Descriptio…

CVE-2026-6106 - 1Panel-dev MaxKB Public Chat static_headers_middleware.py StaticHeadersMiddleware cross site scripting

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-6106 Published : April 11, 2026, 10:15 p.m. | 53 minutes ago Description : A v…

CVE-2026-31845 - Rukovoditel CRM Zadarma Telephony API Reflected XSS

Maloy Roy Orko April 11, 2026

CVE ID : CVE-2026-31845 Published : April 11, 2026, 6:26 p.m. | 42 minutes ago Description : A p…

CVE-2026-35601 - Vikunja has an iCalendar Property Injection via CRLF in CalDAV Task Output

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35601 Published : April 10, 2026, 4:08 p.m. | 57 minutes ago Description : Vik…

CVE-2026-35600 - Vikunja has HTML Injection via Task Titles in Overdue Email Notifications

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35600 Published : April 10, 2026, 4:07 p.m. | 59 minutes ago Description : Vik…

CVE-2026-35599 - Vikunja has an Algorithmic Complexity DoS in Repeating Task Handler

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35599 Published : April 10, 2026, 4:05 p.m. | 1 hour ago Description : Vikunja…

CVE-2026-35598 - Vikunja has Missing Authorization on CalDAV Task Read

Maloy Roy Orko April 10, 2026

CVE ID : CVE-2026-35598 Published : April 10, 2026, 4:04 p.m. | 1 hour, 2 minutes ago Descriptio…

CVE-2026-39983 - FTP Command Injection via CRLF in basic-ftp

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2026-39983 Published : April 9, 2026, 6:17 p.m. | 46 minutes ago Description : basi…

CVE-2024-1490 - Wago: Vulnerability in WBM through Open VPN

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2024-1490 Published : April 9, 2026, 11:16 a.m. | 1 hour, 45 minutes ago Descriptio…

CVE-2026-21388 - Unbounded Request Body Read in MS Teams Plugin Webhook Endpoint

Maloy Roy Orko April 09, 2026

CVE ID : CVE-2026-21388 Published : April 9, 2026, 10:09 a.m. | 52 minutes ago Description : Mat…

CVE-2026-34722 - Zammad is missing authorization in ticket create endpoint

Maloy Roy Orko April 08, 2026

CVE ID : CVE-2026-34722 Published : April 8, 2026, 6:13 p.m. | 47 minutes ago Description : Zamm…

CVE-2026-35604 - File Browser share links remain accessible after Share/Download permissions are revoked

Maloy Roy Orko April 07, 2026

CVE ID : CVE-2026-35604 Published : April 7, 2026, 5:16 p.m. | 31 minutes ago Description : File…

CVE-2026-34208 - SandboxJS: Sandbox integrity escape

Maloy Roy Orko April 06, 2026

CVE ID : CVE-2026-34208 Published : April 6, 2026, 4:16 p.m. | 31 minutes ago Description : Sand…

CVE-2026-5527 - Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2026-5527 Published : April 5, 2026, 12:16 a.m. | 29 minutes ago Description : A we…

CVE-2026-5526 - Tenda 4G03 Pro httpd access control

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2026-5526 Published : April 4, 2026, 10:15 p.m. | 29 minutes ago Description : A se…

CVE-2016-20054 - Nodcms Cross Site Request Forgery via admin endpoints

Maloy Roy Orko April 04, 2026

CVE ID : CVE-2016-20054 Published : April 4, 2026, 8:16 p.m. | 28 minutes ago Description : Nodc…

CVE-2026-25118 - immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums

Maloy Roy Orko April 03, 2026

CVE ID : CVE-2026-25118 Published : April 3, 2026, 4:16 p.m. | 25 minutes ago Description : immi…

CVE-2026-34523 - SillyTavern: Path traversal allows file existence oracle

Maloy Roy Orko April 02, 2026

CVE ID : CVE-2026-34523 Published : April 2, 2026, 6:16 p.m. | 23 minutes ago Description : Sill…

CVE-2026-2265 - Replicator 1.0.5 is vulnerable to Remote Code Execution through Insecure Deserialization

Maloy Roy Orko April 01, 2026

CVE ID : CVE-2026-2265 Published : April 1, 2026, 5:28 p.m. | 1 hour, 8 minutes ago Description …