agentprime: kovah-linkaceEvery new CVE for kovah-linkace.https://agentprime.io/CVE-2026-49436: LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link APIhttps://agentprime.io/advisories/CVE-2026-49436/https://agentprime.io/advisories/CVE-2026-49436/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:40:54 GMTCVECVE-2026-45342: LinkAce: IDOR in Update Policies Allows Any Authenticated User to Overwrite Other Users' Links, Lists, Tags, and Noteshttps://agentprime.io/advisories/CVE-2026-45342/https://agentprime.io/advisories/CVE-2026-45342/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 20:47:20 GMTCVECVE-2026-45343: LinkAce - Stored XSS via Unsanitized SSO User's Name Rendered in Admin Audit Log Allows Session Hijackinghttps://agentprime.io/advisories/CVE-2026-45343/https://agentprime.io/advisories/CVE-2026-45343/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 20:45:51 GMTCVECVE-2026-45344: LinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instanceshttps://agentprime.io/advisories/CVE-2026-45344/https://agentprime.io/advisories/CVE-2026-45344/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 20:41:45 GMTCVECVE-2026-40905: LinkAce: Password Reset Poisoning via X-Forwarded-Host Header Injection Leading to Account Takeoverhttps://agentprime.io/advisories/CVE-2026-40905/https://agentprime.io/advisories/CVE-2026-40905/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 20:02:35 GMTCVECVE-2026-35516: LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protectionhttps://agentprime.io/advisories/CVE-2026-35516/https://agentprime.io/advisories/CVE-2026-35516/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 15:14:45 GMTCVECVE-2026-33954: LinkAce discloses private notesto unauthorized authenticated users via the web link detail pagehttps://agentprime.io/advisories/CVE-2026-33954/https://agentprime.io/advisories/CVE-2026-33954/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 21:23:30 GMTCVECVE-2026-33953: LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAcehttps://agentprime.io/advisories/CVE-2026-33953/https://agentprime.io/advisories/CVE-2026-33953/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 21:22:03 GMTCVECVE-2026-30954: LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()https://agentprime.io/advisories/CVE-2026-30954/https://agentprime.io/advisories/CVE-2026-30954/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 20:40:31 GMTCVECVE-2026-30953: LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequesthttps://agentprime.io/advisories/CVE-2026-30953/https://agentprime.io/advisories/CVE-2026-30953/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 20:38:48 GMTCVECVE-2026-27458: LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Descriptionhttps://agentprime.io/advisories/CVE-2026-27458/https://agentprime.io/advisories/CVE-2026-27458/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 21 Feb 2026 06:54:41 GMTCVECVE-2025-62722: LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Featurehttps://agentprime.io/advisories/CVE-2025-62722/https://agentprime.io/advisories/CVE-2025-62722/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:31:46 GMTCVECVE-2025-62721: LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tagshttps://agentprime.io/advisories/CVE-2025-62721/https://agentprime.io/advisories/CVE-2025-62721/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:07:09 GMTCVECVE-2025-62720: LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Linkshttps://agentprime.io/advisories/CVE-2025-62720/https://agentprime.io/advisories/CVE-2025-62720/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 22:03:09 GMTCVECVE-2025-62719: LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionalityhttps://agentprime.io/advisories/CVE-2025-62719/https://agentprime.io/advisories/CVE-2025-62719/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 21:57:15 GMTCVECVE-2025-59424: LinkAce Vulnerable to Stored XSS on the Audit Pagehttps://agentprime.io/advisories/CVE-2025-59424/https://agentprime.io/advisories/CVE-2025-59424/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Sep 2025 19:53:38 GMTCVECVE-2025-53838: LinkAce has a Stored One Click XSS vulnerabilityhttps://agentprime.io/advisories/CVE-2025-53838/https://agentprime.io/advisories/CVE-2025-53838/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Sep 2025 19:18:17 GMTCVECVE-2024-56508: File Upload Vulnerability Leading to XSS in LinkAce v1.15.5https://agentprime.io/advisories/CVE-2024-56508/https://agentprime.io/advisories/CVE-2024-56508/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Dec 2024 15:52:57 GMTCVECVE-2024-56507: Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAcehttps://agentprime.io/advisories/CVE-2024-56507/https://agentprime.io/advisories/CVE-2024-56507/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Dec 2024 15:50:09 GMTCVE