Read the docs

HaschekSolutions

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

HaschekSolutions records in CISA KEV

No HaschekSolutions vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-65771 CVE-2026-104051 · GHSA-8hvj-6v33-pcpf

PictShare < 3.7.1 Sensitive Information Disclosure via info API

Priority MEDIUM 45

PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the API::info() endpoint which returns the c…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00484 Published 2026-10-01 Fixed in 3.7.1 CWE-522
TI-2026-65780 CVE-2026-104356 · GHSA-6654-r2c2-m62r

PictShare < 3.7.1 Predictable Delete Code via rand()

Priority LOW 36

PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0038 Published 2026-10-01 Fixed in 3.7.1 CWE-338
Open these records in search →