GHSA-532V-XPQ5-8H95

creationtimestamp| type| source ---|---|--- 2026-04-04 01:19:10+00:00| published-proof-of-concept| Telegram/7aT9UpYbZ02LD1lZLti1mg9cdxIpZxAoIiq3Sp7jGujjzO4...

GHSA-9CQ8-3V94-434G

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:36+00:00| published-proof-of-concept| Telegram/ezSRO2n6kkNgiasayGpOrLqy53F2jkHPorQ5yznSyeF-oc...

GHSA-2RCC-JG83-34VP

creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...

CVE-2026-34787

creationtimestamp| type| source ---|---|--- 2026-04-04 00:04:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimwq7bzyr25...

GHSA-5JWG-CR5Q-VJQ2

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:15+00:00| published-proof-of-concept| Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw...

CVE-2026-35562

creationtimestamp| type| source ---|---|--- 2026-04-03 23:21:08+00:00| seen| Telegram/C4IqkAaofmVuG0ts1zoVr23H-sEIs7UsuvOGOq7uR7BrNw 2026-04-03 23:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimv5c4aqd2o 2026-04-04 03:02:58+00:00| seen|...

CVE-2026-22664

creationtimestamp| type| source ---|---|--- 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mindxp3i4l2s 2026-06-17 05:37:07+00:00| seen|...

CVE-2026-31395

creationtimestamp| type| source ---|---|--- 2026-04-03 22:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116343095399596893 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-27634

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634

CVE-2026-27634 affects Piwigo prior to 16.3.0, where four date-filter parameters (f_min_date_available, f_max_date_available, f_min_date_created, f_max_date_created) in ws_std_image_sql_filter() are concatenated into SQL without escaping or type validation. This allows a pre-auth SQL injection th...

EUVD-2026-18868

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...

GHSA-8PRR-286P-4W7J

creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...

GHSA-67JX-R9PV-98RJ

creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...

GHSA-GP5X-2V54-V2Q5

creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...

CVE-2026-31404

creationtimestamp| type| source ---|---|--- 2026-04-03 16:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim43ex3js2i 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-31399

creationtimestamp| type| source ---|---|--- 2026-04-03 16:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3pp62gd2j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...