Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 4.3 PACKETSTORM:224390

📄 Docmost 0.70.2 Authorization Bypass_PACKETSTORM:224390

In Docmost versions 0.70.0 through 0.70.2, restricted child pages hidden from public share viewers could still leak through public share search res...

N/A N/A PACKETSTORM
NONE PACKETSTORM:224403

📄 phpSysInfo 3.4.5 IP Allowlist Bypass_PACKETSTORM:224403

phpSysInfo versions 3.4.5 and below suffer from an IP Allowlist bypass vulnerability...

N/A N/A PACKETSTORM
CRITICAL 10 B351E803-26D7-

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft_B351E803-26D7-5CFC-8727-D423591F86F5

SMBGhost Scanner — CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation pa...

N/A N/A GITHUBEXPLOIT
NONE PACKETSTORM:224409

📄 Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution_PACKETSTORM:224409

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Peyara Remote Mouse 1.0.1. The application exposes a Sock...

N/A N/A PACKETSTORM
CRITICAL 9.4 ED8AC01D-C112-

Exploit for SQL Injection in Ghost_ED8AC01D-C112-5F2F-86B2-002DDA813E82

CVE-2026-26980 — Ghost CMS Content API Blind SQL Injection Affected: Ghost 3.24.0 – 6.19.0 Fixed in: Ghost 6.19.1 Auth required: None — Content API...

N/A N/A GITHUBEXPLOIT
NONE F6F142F3-3C4F-

pocsmith_F6F142F3-3C4F-57A3-A265-A7DF88A31A6B

pocsmith pocsmith generates modular Python proof-of-concept templates from alias flags or YAML profiles. Install From GitHub with pipx: bash pipx i...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 CVE-2026-46602

Lack of limit on tile sizes in x/image/tiff in golang.org/x/image_CVE-2026-46602

The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to...

golang.org/x/image golang.org/x/image/tiff CVE
HIGH 7.5 CVE-2026-46601

Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image_CVE-2026-46601

The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size.

golang.org/x/image golang.org/x/image/webp CVE
HIGH 7.7 CVE-2026-37149

CVE-2026-37149_CVE-2026-37149

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter ...

n/a n/a n/a CVE
HIGH 7.5 CVE-2026-37454

CVE-2026-37454_CVE-2026-37454

Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 allows a remote attacker to obtain sensitive information via the 3DE...

n/a n/a n/a CVE