CVE-2026-48747

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.0.13, MailomatRequestParser::validateSignature parsed X-MOM-Webhook-Signature as algo=signature and passed the request-selected algorithm to hashhmac, allowing a signature...

MAL-2026-10541 Malicious code in proxy-seller-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae92b460e6db9195467e69567fadc3286877ea8e6b121448288a4f77acf5201 Package is published as proxy-seller-mcp with author: "Proxy-Seller" in package.json and a README directing users to obtain an API key at...

CVE-2026-48747: Improper Verification of Cryptographic Signature

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 7.4.13 and 8.0.13, MailomatRequestParser::validateSignature parsed X-MOM-Webhook-Signature as algo=signature and passed the request-selected algorithm to hashhmac, allowing a signature...

EUVD-2026-19062

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

CVE-2026-5557

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

CVE-2026-5557 badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

CVE-2026-5557 badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

CVE-2026-5557: Authentication Bypass Using an Alternate Path or Channel

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

PT-2026-30427

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

Update rollup 8.0.11049.0 for Microsoft Monitoring Agent (KB4015075)

Update rollup 8.0.11049.0 for Microsoft Monitoring Agent KB4015075 Applies To System Center 2012 R2 Operations Manager Summary This article describes the issues that are fixed in update rollup 8.0.11049.0 for the Microsoft Monitoring Agent. It also contains installation instructions for the updat...

mom-pussy.com Cross Site Scripting vulnerability OBB-3041991

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mom-system.com Cross Site Scripting vulnerability OBB-2471832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hangzhou Zhicong Network Technology Co., Ltd's Rice Cake Mom APP Has Denial of Service Vulnerability

Rice Cake Mom APP is a professional mother and baby service application. Hangzhou Zhicong Network Technology Co., Ltd. rice cake mom APP has a denial of service vulnerability, attackers can send malformed packets to exploit the vulnerability to cause the APP stop running...

Fedora Local Elevation of Privilege Vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in mom in Fedora. A local attacker can exploit this vulnerability to edit the PID file and terminate other processes...

PT-2019-6778

Name of the Vulnerable Software and Affected Versions mom affected versions not specified Description The issue is related to the creation of world-writable pid files in /var/run by mom. This could potentially allow unauthorized access or modification of these files. Recommendations At the moment...

PT-2019-14341

Name of the Vulnerable Software and Affected Versions Altair PBS Professional versions prior to 19.1.3 Description The issue allows for privilege escalation due to the lack of proper authentication when sending messages directly to pbs mom, resulting in code execution as an arbitrary user...

brazil.mom-rsf.org XSS vulnerability

Open Bug Bounty ID: OBB-704333 Description| Value ---|--- Affected Website:| brazil.mom-rsf.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

Hello Mom - SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Hello Mom published at the 'play' market has multiple vulnerabilities...

Happy-Mom - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Happy-Mom published at the 'play' market has multiple vulnerabilities...

PT-2013-4955

Name of the Vulnerable Software and Affected Versions Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager versions 2.5.x, 4.x, and earlier Description The issue allows remote authenticated users to execute arbitrary jobs by submitting a command due to improper access...