GHSA-Q7F2-RV22-2XGR FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

Summary Fectura Scripts is an open-source ERP application, a sensitive information disclosure vulnerability was identified in the Library module's image upload and download pipeline. The application fails to strip EXIF and other embedded metadata from user-uploaded image files before storing them...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the image upload and download process. An attacker can access sensitive metadata, such as GPS coordinates, device information, timestamps, and personally identifiab...

PT-2026-38611

Name of the Vulnerable Software and Affected Versions FacturaScripts versions prior to 2026 Description A sensitive information disclosure issue exists in the Library module of FacturaScripts. The application stores and serves uploaded images byte-for-byte without stripping EXIF, XMP, or IPTC...

CVE-2026-5081

creationtimestamp| type| source ---|---|--- 2026-05-06 17:00:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml76h2e3pn2j 2026-05-06 17:01:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76ilwkxd2g...

CVE-2025-13618

creationtimestamp| type| source ---|---|--- 2026-05-05 04:31:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3e4rhkvc2t 2026-05-05 05:37:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml3htlgwzg2f 2026-05-05 19:59:59+00:00| seen|...

CVE-2026-5722

creationtimestamp| type| source ---|---|--- 2026-05-05 02:24:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml34zrwaps2n 2026-05-05 02:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml35d2qrq62t 2026-05-05 03:00:30+00:00| seen|...

CVE-2026-0073

creationtimestamp| type| source ---|---|--- 2026-05-04 18:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2d26f5kc2e 2026-05-04 20:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2hl2mb3f2f 2026-05-04 20:51:45+00:00| seen|...

CVE-2026-42079

creationtimestamp| type| source ---|---|--- 2026-05-04 18:10:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bgbykt22w 2026-05-04 18:11:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bhdmvyd2c...

CVE-2026-6379

creationtimestamp| type| source ---|---|--- 2026-05-04 11:00:12+00:00| seen| Telegram/eCtd4B0TSlz1bIReYjdv8Rjs1z4tyEtlty8zrSnziSulk4 2026-05-04 15:00:07+00:00| seen| Telegram/0HRy55XY1gHFnZjznakOF7ZoOcpEYzc0dvtDC6c94sHEnY 2026-05-08 22:57:05+00:00| seen|...

CVE-2026-7748

creationtimestamp| type| source ---|---|--- 2026-05-04 10:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhle3opr2k 2026-05-04 10:57:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzj77wp5h2t...

CVE-2026-7712

creationtimestamp| type| source ---|---|--- 2026-05-04 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkyejjpcik2p 2026-05-04 00:00:49+00:00| seen| https://infosec.exchange/users/offseq/statuses/116513363610813393 2026-05-04 01:08:37+00:00| seen|...

CVE-2026-7546

creationtimestamp| type| source ---|---|--- 2026-05-01 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkrbxm6sjl2k 2026-05-01 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116497437579436842 2026-05-01 04:30:29+00:00| seen|...

CVE-2026-7551

creationtimestamp| type| source ---|---|--- 2026-04-30 22:18:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqnf62gaw2k 2026-04-30 23:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqrjfylyl2v 2026-05-25 19:07:08+00:00| seen|...

CVE-2026-33450

creationtimestamp| type| source ---|---|--- 2026-04-30 21:22:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkqkaw2txcl2 2026-04-30 22:01:15+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh7g4mj2q 2026-04-30...

CVE-2022-50992

creationtimestamp| type| source ---|---|--- 2026-04-30 20:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqikfiedi2v 2026-04-30 21:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkdmhs2v2t 2026-07-08 01:03:22+00:00| exploited|...

CVE-2026-36959

creationtimestamp| type| source ---|---|--- 2026-04-30 17:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq52xwf6d2p 2026-04-30 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62mg5c72l...

CVE-2026-36956

creationtimestamp| type| source ---|---|--- 2026-04-30 17:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq4rz5rue2o 2026-04-30 18:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq6z6o7td2r...

CVE-2026-5174

creationtimestamp| type| source ---|---|--- 2026-04-30 12:52:32+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-410 2026-04-30 17:30:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq5dxnf622p 2026-04-30 17:43:25+00:00| seen|...

CVE-2026-7243

creationtimestamp| type| source ---|---|--- 2026-04-28 12:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116482338362194303 2026-04-28 12:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkklmuu4fh26...

CVE-2026-7248

creationtimestamp| type| source ---|---|--- 2026-04-28 09:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkkbkxvuui2o 2026-04-28 09:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116481630491966753 2026-04-28 11:14:03+00:00| seen|...