Skip to content
OpenAdvisories

Vendor

HaschekSolutions

3 known vulnerabilities.

Products

PictShare 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-104356 Public exploit

    PictShare < 3.7.1 Predictable Delete Code via rand()

    PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php. Attackers can predict or infer the PRNG st…

    HaschekSolutions PictShare
  • High 8.2
    CVE-2026-104051 Public exploit

    PictShare < 3.7.1 Sensitive Information Disclosure via info API

    PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the complete raw metadata object without a f…

    HaschekSolutions PictShare