Protect Web Society

CVE-2026-5934 - WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

Maloy Roy Orko August 28, 2026

CVE ID : CVE-2026-5934 Published : Aug. 28, 2026, 4:18 p.m. | 56 minutes ago Descript…

CVE-2026-5680 - Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Maloy Roy Orko August 27, 2026

CVE ID : CVE-2026-5680 Published : Aug. 27, 2026, 4:25 p.m. | 48 minutes ago Descript…

CVE-2026-48549 - Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48549 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-48548 - Nagios Core CSRF via cmd.cgi

Maloy Roy Orko August 26, 2026

CVE ID : CVE-2026-48548 Published : Aug. 26, 2026, 4:16 p.m. | 56 minutes ago Descrip…

CVE-2026-79785 - X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

Maloy Roy Orko August 25, 2026

CVE ID : CVE-2026-79785 Published : Aug. 25, 2026, 4:17 p.m. | 55 minutes ago Descrip…

CVE-2026-66907 - Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66907 Published : Aug. 24, 2026, 4:13 p.m. | 58 minutes ago Descrip…

CVE-2026-66906 - Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Maloy Roy Orko August 24, 2026

CVE ID : CVE-2026-66906 Published : Aug. 24, 2026, 4:12 p.m. | 59 minutes ago Descrip…

CVE-2026-19565 - Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-19565 Published : Aug. 23, 2026, 8:16 p.m. | 54 minutes ago Descrip…

CVE-2026-75922 - Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line

Maloy Roy Orko August 23, 2026

CVE ID : CVE-2026-75922 Published : Aug. 23, 2026, 6:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74709 - xsk: clear metadata pointer when no timestamp is requested

Maloy Roy Orko August 22, 2026

CVE ID : CVE-2026-74709 Published : Aug. 22, 2026, 4:16 p.m. | 54 minutes ago Descrip…

CVE-2026-74582 - packet: use consistent hard_header_len in non-ring send paths

Maloy Roy Orko August 21, 2026

CVE ID : CVE-2026-74582 Published : Aug. 21, 2026, 4:31 p.m. | 38 minutes ago Descrip…

CVE-2026-18301 - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

Maloy Roy Orko August 20, 2026

CVE ID : CVE-2026-18301 Published : Aug. 20, 2026, 4:23 p.m. | 46 minutes ago Descrip…

CVE-2026-64851 - Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers

Maloy Roy Orko August 19, 2026

CVE ID : CVE-2026-64851 Published : Aug. 19, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-75904 - libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File

Maloy Roy Orko August 18, 2026

CVE ID : CVE-2026-75904 Published : Aug. 18, 2026, 4:18 p.m. | 50 minutes ago Descrip…

CVE-2026-50770 - Squirro Cognitive Search Privilege Escalation

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50770 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-50769 - Brainformatik CRM+ SQL Injection

Maloy Roy Orko August 17, 2026

CVE ID : CVE-2026-50769 Published : Aug. 17, 2026, 6:17 p.m. | 50 minutes ago Descrip…

CVE-2026-19958 - iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19958 Published : Aug. 16, 2026, 10:15 p.m. | 52 minutes ago Descri…

CVE-2026-19956 - gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery

Maloy Roy Orko August 16, 2026

CVE ID : CVE-2026-19956 Published : Aug. 16, 2026, 8:15 p.m. | 52 minutes ago Descrip…

CVE-2026-15689 - Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

Maloy Roy Orko August 15, 2026

CVE ID : CVE-2026-15689 Published : Aug. 15, 2026, 2:17 p.m. | 2 hours, 49 minutes ago …

CVE-2026-13196 - Out-of-bounds Write in KUNBUS piControl

Maloy Roy Orko August 14, 2026

CVE ID : CVE-2026-13196 Published : Aug. 14, 2026, 4:16 p.m. | 49 minutes ago Descrip…