Trinity Audio <= 5.21.0 - Information Exposure

The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the /admin/inc/phpinfo.php file that gets created on install. This makes it possible for...

Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM은 클라우드 구성 및 메타데이터에 대한 심층적인 통찰력을 제공하여 시간이 지남에 따라 위험을 이해하고 줄이는 데 도움을 주는 오픈소스 플랫폼입니다. OpenCSPM은 누구를 위한 것인가요? 클라우드 환경에서 인프라를 운영하며 전체 계정에 걸친 보안 위험을 파악하고 이러한 문제의 해결을 추적하려는 보안 팀. 새로운 시스템을 개발하고 초기부터 자주 보안을 내재화하기 위해 따라야 할 보안 모범 사례 세트를 찾는 개발 및 인프라 팀...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n 未認証設定情報の開示 📌 概要 CVE ID: CVE-2026-25049 影響を受けるソフトウェア: n8n 深刻度: Critical カテゴリ: 不適切なアクセス制御 / 情報開示 この脆弱性により、特定の n8n デプロイ環境では、REST API エンドポイントを介して認証なしで内部設定データにアクセス できる可能性があります。 🧭 目次 概要 技術詳細 影響 影響を受けるバージョン 検証 緩和策 セキュリティ上の注意 免責事項 🔍 技術詳細 脆弱な設定では、以下のエンドポイントが認証なしでアクセス可能です: GET...

CVE-2025-56801

CVE-2025-56801 Reolink デスクトップアプリケーションにおける AES-CFB IV 生成の脆弱性 1. 概要 名称 : Reolink デスクトップアプリケーション バージョン : 8.18.12 ベンダー : Reolink CWE : CWE-1204: 弱い初期化ベクトルIVの生成, CWE-321: ハードコードされた暗号鍵の使用 CVSS : 5.1 MEDIUM ベクター文字列 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 2. 概要 Reolink デスクトップアプリケーションバージョン...

CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC WordPress용 InfiniteWP Client 플러그인1.11.1 이하 버전은 민감한 정보 노출Sensitive Information Exposure 결함에 취약합니다. 이 취약점으로 인해 구독자subscriber 수준 이상의 권한을 가진 인증된 공격자가 구성 세부 정보를 포함한 민감한 데이터를 추출할 수 있습니다. 이 취약점의 악용은 플러그인이 이전에 구성된 적이 없는 경우에만 가능합니다. 다른 임의 플러그인 설치 및 활성화 취약점과 결합되면 사이트의 원격 관리 ...

CVE-2026-88263

XikeStor Layer3 switches have a missing-authentication flaw that allows an unauthenticated attacker to download configuration data over the network. The retrieved data may contain network configurations and passwords , enabling an attacker to operate the switch improperly or use it as a jump host...

PT-2026-93335

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure allows a hacker to circumvent security restrictions.

The vulnerability of the authentication mechanism of the N-able N-central platform for monitoring and managing IT infrastructure is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

CVE-2026-88263: Missing Authentication for Critical Function

XikeStor Layer3 switches miss authentication for downloading configuration data. Unauthenticated attacker may retrieve the configuration data containing network configurations and passwords to operate the affected product improperly or to exploit the affected product as a jump host...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the getNimbusConf process. An attacker can obtain sensitive configuration data, including authentication payloads and keystore or truststore passwords, by making unauthorized requests to the...

CVE-2026-0305

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

EUVD-2026-75259

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

PT-2026-89281

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

Prisma Access Agent: Information Disclosure Vulnerability on Linux

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected. Work around: No known workarounds or...

ROS-20260907-73-0042

The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the `compat_mtw_from_user()` function in the `net/bridge/netfilter/ebtables.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compatmtwfromuser function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...