Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

sigint

SIGINT Real-time OSINT dashboard with live aircraft, vessel, seismic, fire, weather, and event tracking on an interactive globe. Built with Bun, React 19, and a custom Canvas 2D + Web Worker rendering engine. Installable as a PWA. Screenshot Table of Contents SIGINT Screenshot Table of Contents...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

Bugs-feed

Bug's feed Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities... It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look to the latest bug...

darkroute

DarkRoute they watching. we watching back. Table of contents What this is Repository layout Architecture Public API Runtime workflow Prerequisites Installation Environment variables Development commands Test commands Security and privacy model Design sources and the token rule Platform limits...

CVE-2026-64862

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

CVE-2026-64862

The open-source human resources management solution Frappe HR is vulnerable to a missing authorization flaw (CWE-862) in its PWA API endpoints . Versions prior to 15.58.3 and 16.4.3 do not consistently authorize employee-specific PWA API requests, allowing an authenticated user to request and acc...

CVE-2026-64862 Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

EUVD-2026-103173

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

CVE-2026-64862

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

CVE-2026-64862 Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

CVE-2026-64862 Frappe HR: Missing Authorization on PWA API Endpoints enables Cross-Employee Data access in HRMS

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...

CLSA-2026-1792163467 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 18.2.21-tuxcare.3...

CLSA-2026-1792163466 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 17.3.17-tuxcare.5...

CLSA-2026-1792163465 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 19.2.27-tuxcare.2...

CLSA-2026-1792163464 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 19.2.25-tuxcare.3...

CLSA-2026-1792163463 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 22.1.6-tuxcare.1...

CLSA-2026-1792163461 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 18.2.21-tuxcare.2...

CLSA-2026-1792163460 TuxCare security update for @angular/pwa (1 CVE)

TuxCare rebuilt @angular/pwa to address 1 CVE. Fixed in 17.3.17-tuxcare.3...

PT-2026-116159

Frappe HR is an open-source human resources management solution HRMS. Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee-specific PWA API requests. An authenticated user requests records associated with another employee. The user can reque...