Relevanssi (A Better Search) <= 4.22.0 - Query Log Export

The Relevanssi Search plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in all versions up to, and including, 4.22.0. This makes it possible for unauthenticated attackers to export the query log data. id: CVE-2024-1380 info: name: Relevanssi A...

mapXplore

mapXplore Español mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time ...

rapiddns-cli

RapidDNS CLI 中文文档 A powerful command-line interface for interacting with the RapidDNS API. This tool allows you to perform DNS searches, advanced queries, and large-scale data exports directly from your terminal. Features DNS Search : Search by domain, IP, or CIDR. Advanced Query : Use powerful...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

CVE-2026-107025

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

CVE-2026-107025: n/a: Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export…

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

Michael Butscher WikiAndPad security vulnerability

The Michael Butscher WikiAndPad has a security vulnerability stemming from improper permission settings, which may allow unauthorized attackers to export application data...

PT-2026-132218

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

CVE-2026-107025

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

CVE-2026-107025

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

EUVD-2026-113178

Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 versionCode 200300 allows unauthorized attackers to export the application's data...

CVE-2026-107025

The WikiAndPad application (alpha/beta v0.2alpha03 , versionCode 200300) is affected by a vulnerability involving insecure permissions . This flaw allows unauthorized attackers to export the application's data . The vulnerability is associated with CWE-926 (Improper Export of Android Application ...

CVE-2026-50541

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /dataset/export/csv/id allow an authenticated user to export data from any dataset, including datasets created by...

EUVD-2026-112086

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /dataset/export/csv/id allow an authenticated user to export data from any dataset, including datasets created by...

CVE-2026-50541

The Xibo open source digital signage platform is vulnerable to an IDOR (Broken Object-Level Authorization) flaw in versions prior to 4.4.3 . The root cause is missing access-control checks on the GET /dataset/export/csv/{id} endpoint, which allows an authenticated user to export data from any dat...

CVE-2026-50541

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on "GET /dataset/export/csv/id" allow an authenticated user to export data from any dataset, including datasets created by...

CVE-2026-50541: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /dataset/export/csv/id allow an authenticated user to export data from any dataset, including datasets created by...

n8n input validation error vulnerability

Versions of n8n prior to 1.123.85, versions 2.x prior to 2.43.5, and versions 2.44.x prior to 2.44.1 contain an input validation error vulnerability. This vulnerability arises because Microsoft Outlook contacts are searched for, and Microsoft SharePoint v1 project update nodes fail to escape...

PT-2026-128246

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on GET /dataset/export/csv/id allow an authenticated user to export data from any dataset, including datasets created by...

CVE-2026-109401

The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'emailaddress' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to extract complete logged mail ro...