Skip to content
Threat Feed
Subscribe

Tag

Pictshare

1 brief RSS
low advisory

Unauthorized File Deletion in PictShare via Predictable Delete Codes

PictShare versions prior to 3.7.1 contain a vulnerability where insecure PRNG usage for delete_code generation allows unauthenticated attackers to delete arbitrary files from hosted instances.

PictShare web-application-vulnerability cve-2026-104356
1c