Protect Web Society

Showing posts with the label Protect Web Society

CVE-2026-48549 - Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48549 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-48548 - Nagios Core CSRF via cmd.cgi

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48548 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-79785 - X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

Maloy Roy Orko August 25, 2026

CVE ID : CVE-2026-79785 Published : Aug. 25, 2026, 4:17 p.m. | 55 minutes ago Descrip…

CVE-2026-66907 - Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66907 Published : Aug. 24, 2026, 4:13 p.m. | 58 minutes ago Descrip…

CVE-2026-66906 - Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66906 Published : Aug. 24, 2026, 4:12 p.m. | 59 minutes ago Descrip…

CVE-2026-19565 - Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-19565 Published : Aug. 23, 2026, 8:16 p.m. | 54 minutes ago Descrip…

CVE-2026-75922 - Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-75922 Published : Aug. 23, 2026, 6:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74709 - xsk: clear metadata pointer when no timestamp is requested

Maloy Roy Orko August 22, 2026

CVE ID : CVE-2026-74709 Published : Aug. 22, 2026, 4:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74582 - packet: use consistent hard_header_len in non-ring send paths

Maloy Roy Orko August 21, 2026

CVE ID : CVE-2026-74582 Published : Aug. 21, 2026, 4:31 p.m. | 38 minutes ago Descrip…

CVE-2026-18301 - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

Maloy Roy Orko August 20, 2026

CVE ID : CVE-2026-18301 Published : Aug. 20, 2026, 4:23 p.m. | 46 minutes ago Descrip…

CVE-2026-64851 - Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers

Maloy Roy Orko August 19, 2026

CVE ID : CVE-2026-64851 Published : Aug. 19, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-75904 - libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File

Maloy Roy Orko August 18, 2026

CVE ID : CVE-2026-75904 Published : Aug. 18, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-50770 - Squirro Cognitive Search Privilege Escalation

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50770 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-50769 - Brainformatik CRM+ SQL Injection

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50769 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-19958 - iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19958 Published : Aug. 16, 2026, 10:15 p.m. | 52 minutes ago Descri…

CVE-2026-19956 - gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19956 Published : Aug. 16, 2026, 8:15 p.m. | 52 minutes ago Descrip…

CVE-2026-15689 - Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

Maloy Roy Orko August 15, 2026

CVE ID : CVE-2026-15689 Published : Aug. 15, 2026, 2:17 p.m. | 2 hours, 49 minutes ago …

CVE-2026-13196 - Out-of-bounds Write in KUNBUS piControl

Maloy Roy Orko August 14, 2026

CVE ID : CVE-2026-13196 Published : Aug. 14, 2026, 4:16 p.m. | 49 minutes ago Descrip…

CVE-2026-58432 - Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea

Maloy Roy Orko August 13, 2026

CVE ID : CVE-2026-58432 Published : Aug. 13, 2026, 4:44 p.m. | 20 minutes ago Descrip…

CVE-2026-58428 - Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)

Maloy Roy Orko August 13, 2026

CVE ID : CVE-2026-58428 Published : Aug. 13, 2026, 4:44 p.m. | 20 minutes ago Descrip…

Protect Web Society

Top Articles

CVE-2024-42749 - Alto CMS Cross Site Scripting Vulnerability

CVE-2025-36356 - IBM Security Verify Access privilege escalation

CVE-2026-64851 - Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers

CVE-2026-50770 - Squirro Cognitive Search Privilege Escalation

CVE-2026-18301 - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

CVE-2026-19958 - iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection

CVE-2022-50992 - Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet

How VAPT Strengthens Your Security: Detailed Insights into Vulnerability Assessment and Penetration Testing