CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC Il plugin InfiniteWP Client per WordPress, nelle versioni fino alla 1.11.1 inclusa, è vulnerabile a un difetto di esposizione di informazioni sensibili. Questa vulnerabilità consente ad aggressori autenticati con permessi a livello di abbonato o superiori di estrar...

CVE-2023-5359

CVE-2023-5359 - Vulnerabilità di archiviazione in chiaro di W3 Total Cache Descrizione CVE-2023-5359 è una vulnerabilità di archiviazione in chiaro che interessa il plugin WordPress W3 Total Cache nelle versioni ≤ 2.7.5. Questa vulnerabilità consente a utenti malintenzionati remoti di accedere a...

CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure

CVE-2024-1302 --- Badgermeter moni tool - Esposizione di informazioni sensibili https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. Link del software :...

CVE-2024-9014

Questo post è un articolo di ricerca pubblicato da EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 PoC di Esposizione di Informazioni Sensibili ★ Descrizione CVE-2024-9014 : Esposizione di Informazioni Sensibili in pgAdmin4 descrizione: le versioni di pgAdmin 8.11 e precedenti sono vulnerabili a un difett...

CVE-2026-19632 TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure

CVE-2026-19632 affects the TranslatePress – Multilingual WordPress plugin (all versions ≤ 3.3.1). An unauthenticated attacker can retrieve a plaintext administrator password-reset URL via the trp_get_translations_regular AJAX action, which exposes dictionary rows from the secondary-language trans...

djangohunter

Djangohunter Strumento progettato per aiutare a identificare applicazioni Django configurate in modo errato che espongono informazioni sensibili. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/...

CVE-2024-1209

CVE-2024-1209 Esposizione di informazioni sensibili tramite gli assignment in LearnDash. Visitatori non autenticati possono sfogliare e scaricare gli assignment caricati. Vulnerability: CVE-2024-1209 Esposizione di informazioni sensibili tramite assignment CVSS: 5.3 Media Software: LearnDash...

CVE-2019-1653

CVE-2019-1653 Uma vulnerabilidade na interface de gerenciamento baseada na web dos roteadores VPN WAN Dual Gigabit Cisco Small Business RV320 e RV325 pode permitir que um atacante remoto não autenticado obtenha informações sensíveis. Este simples script Python é uma automação de exploit para o...

TCExam <= 14.8.1 - Sensitive Information Exposure

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. id: CVE-2021-20114 info: name: TCExam = 14.8.1 - Sensitive Information Exposure author: push4d severity:...

Lokomedia CMS - Local File Inclusion

A Local File Inclusion LFI vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information. id: CVE-2010-2018 info: name: Lokomedia CMS - Local File Inclusion author: r3Y3r53 severit...

Jira - Local File Inclusion

Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion. id: CVE-2019-8442 info: name: Jira - Local File Inclusion author:...

LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure

The LiteSpeed Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.1 through the debug.log file that is publicly exposed. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

Label Studio - Sensitive Information Exposure

An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...

LearnPress < 4.2.7.4 - Course Material - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. id: CVE-2024-11868 info: name: LearnPress 4.2.7.4 -...

CVE-2025-22828

CVE-2025-22828 📜 Beschreibung Apache CloudStack 4.16.0 und spätere Versionen weisen ein Problem mit einer fehlerhaften Zugriffskontrolle auf, das es Benutzern mit Kenntnis der Ressourcen-UUIDs ermöglicht, Kommentare Annotationen zu Ressourcen zu lesen oder hinzuzufügen, auf die sie nicht zugreife...

CVE-2026-78555 RansomLook API Key Disclosure Through /admin/apikeys HTML Source

RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key, the full token was embedded in hidden form fields used by the enable/disable, private-access, and delete...

CVE-2026-61397

Apache CloudStack 's OAuth2 authentication plugin and Google OAuth integration are affected by an Exposure of Sensitive Information to an Unauthorized Actor vulnerability, identified as an OAuth2 Token Cross-Request Leak . The issue affects versions 4.19.0.0 through 4.20.3.0 and 4.21.0.0 through ...

CVE-2026-16520

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...

CVE-2026-16964

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...

CVE-2026-16964 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...