Skip to content
OpenAdvisories

Vendor

HaschekSolutions

3 known vulnerabilities.

Products

PictShare 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-104356 Public exploit

    PictShare < 3.7.1 Predictable Delete Code via rand()

    PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php. Attackers can predict or infer the PRNG st…

    HaschekSolutions PictShare