Recent Advisories

Severity ID Title Vendor Product Date Type
NONE F9B25569-99EF-

ctf-hackathon-kit_F9B25569-99EF-5467-BAC4-D7CB41A642A6

🚩 CTF / Hackathon Starter Pack A complete, offline-ready toolkit for cyber CTFs and hackathons Hack The Box / picoCTF / TryHackMe style. Everythin...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.1 CVE-2026-56332

Capgo – Open Redirect via confirmation_url Parameter_CVE-2026-56332

Capgo before 12.128.2 contains an open redirect vulnerability in the confirm-signup endpoint that allows attackers to redirect users to arbitrary e...

Capgo Capgo CVE
MEDIUM 4.8 CVE-2026-56330

Capgo – Open Redirect via Unvalidated Stripe Billing URLs_CVE-2026-56330

Capgo before 12.128.2 contains an open redirect vulnerability in stripe_portal and stripe_checkout endpoints that accept unvalidated callbackUrl, s...

Capgo Capgo CVE
MEDIUM 5.3 CVE-2026-56319

Capgo – App Existence Oracle via GET /statistics/app/:app_id_CVE-2026-56319

Capgo before 12.128.2 contains an information disclosure vulnerability in the GET /statistics/app/:app_id endpoint that allows app-limited API keys...

Capgo Capgo CVE
MEDIUM 5.3 CVE-2026-56307

Cap-go – Broken Cursor Pagination in /private/devices Endpoint_CVE-2026-56307

Cap-go before 12.128.12 contains a broken cursor pagination vulnerability in the /private/devices endpoint on the Cloudflare/workerd path that allo...

Cap-go capgo CVE
MEDIUM 6.9 CVE-2026-56304

picklescan – Arbitrary File Creation via logging.FileHandler Deserialization_CVE-2026-56304

picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte fi...

picklescan picklescan CVE
MEDIUM 5.3 CVE-2026-56295

Capgo – Policy Enforcement Bypass in Webhook Management Endpoints via Non-Expiring API Keys_CVE-2026-56295

Capgo before 12.128.2 contains an authorization bypass vulnerability in webhook management endpoints that allows non-expiring API keys to bypass th...

Capgo Capgo CVE
MEDIUM 4.3 CVE-2026-56294

capacitor-native-biometric – Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceeded_CVE-2026-56294

capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to va...

capacitor-native-biometric capacitor-native-biometric CVE
MEDIUM 6.9 CVE-2026-56282

Capgo – Information Disclosure via Unauthenticated /replication Endpoint_CVE-2026-56282

Capgo before 12.128.2 contains an information disclosure vulnerability in the unauthenticated /replication endpoint that exposes internal PostgreSQ...

Capgo Capgo CVE
MEDIUM 6 CVE-2026-56276

Flowise – Mass Assignment in PUT /api/v1/user Allows Password Hash Override_CVE-2026-56276

Flowise before 3.1.2 contains a mass assignment vulnerability in the PUT /api/v1/user endpoint that allows authenticated users to directly modify t...

Flowise Flowise CVE