CVE-2026-61608

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...

CVE-2026-61608 SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links

SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, UserInvitation entities have no expiry timestamp. Invitation links mailed to users remain valid indefinitely, meaning a leaked, forwarded, or archived invitation email can be used at any time in the future to join a compan...

EUVD-2018-8905

Malware in sbrugna...

PT-2024-13720 · Wazuh · Wazuh

Name of the Vulnerable Software and Affected Versions: Wazuh versions prior to 4.7.1 Description: A NULL pointer dereference was detected in the analysis engine of Wazuh, a free and open source platform used for threat prevention, detection, and response. This issue occurs when the analysisd...