Security Bulletin:Sensitive Data Exposure in Erlang OTP inets (httpc_response module)

Summary Sensitive Data Exposure vulnerability in Erlang OTP inets httpcresponse module allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary...

CVE-2026-66666 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...

CVE-2026-66666

This vulnerability in WordPress Core (versions through 7.1.2 ) allows for the unauthenticated exposure of sensitive data , specifically comments on private and unpublished posts . The flaw is categorized as an Insertion of Sensitive Information Into Sent Data (CWE-201) via the Comment Feed functi...

CVE-2026-66666 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...

WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability discovered by Ananda Dhakal Patchstack in WordPress core versions = 7.1.2...

CVE-2026-105861

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2022-0482_exploit

CVE-2022-0482 脆弱性の悪用 はじめに このドキュメントでは、Easy!Appointments スケジューリングソフトウェアで特定された重大なセキュリティ脆弱性である CVE-2022-0482 の詳細な分析について概説します。CWE-863 に分類される不適切な認可に関連するこの欠陥により、適切な認証なしに個人を特定できる情報への不正アクセスが可能になり、データの機密性と整合性に重大なリスクをもたらします。 著者 Mija Pilkaite 脆弱性の概要 CVE-2022-0482 は、1.4.3 より前のバージョンの Easy!Appointments...

sickrageWTF

Sickrageの平文GitHub認証情報 CVE-2018-9160 1. 概要 エクスプロイトタイトル: SickRage HTTPレスポンス内の平文認証情報 日付: 2018-04-01 エクスプロイト作者: Sven Fassbender 連絡先: https://twitter.com/mezdanak ベンダーホームページ: https://sickrage.github.io ソフトウェアリンク: https://github.com/SickRage/SickRage バージョン:...

CVE-2024-24919-POC

CVE-2024-24919-POC CVE-2024-24919 機密情報の露出 を自動化するシンプルなツール Features 使いやすい。 役立つコメント; 複数のドメインをテスト可能 Usage git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ cd CVE-2024-24919-POC; chmod +x CVE-2024–24919.sh ./CVE-2024–24919.sh -h Shodan Dorks to Find Vulnerable Domains Server: "Check Point...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-105861

The headless content management system Payload is vulnerable in versions after 3.0.0 and before 3.90.0 . The flaw resides in the authenticated external URL-based upload retrieval feature, where the system fails to verify the trustworthiness of a redirected destination. This origin validation erro...

CVE-2026-105861 Payload external upload trust validation issue

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

redis-cve-2026-23479-scanner

CVE-2026-23479 スキャナー Redis の Use-After-Free 脆弱性 CVE-2026-23479 を検出するツール。 Redis インスタンスの脆弱性、設定ミス、露出リスクを自動的にチェックします。 影響を受けるバージョン ブランチ| 影響あり| 修正済み ---|---|--- 7.2.x| 7.2.0 - 7.2.13| 7.2.14 7.4.x| 7.4.0 - 7.4.8| 7.4.9 8.2.x| 8.2.0 - 8.2.5| 8.2.6 8.4.x| 8.4.0 - 8.4.2| 8.4.3 8.6.x| 8.6.0 - 8.6.2| 8.6.3...

CVE-2026-67270

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

SnipRecover-CLI

SnipRecover CLI Windows Snipping Tool の CVE-2023-28303 脆弱性による PNG キャプチャの検出と復元 SnipRecover CLI は、依存関係のない最小限のコマンドラインユーティリティで、以下の機能を提供します。 検出 : Windows Snipping Tool の脆弱性 CVE‑2023‑28303 によって変更された PNG ファイルを検出します。 復元 : IEND チャンクの後に追加された圧縮データを回復して元の画像を復元します。 デフォルトでは、復元された画像は RGBA 形式、解像度 1920×1080...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner CVE-2026-20230 の影響を受ける可能性がある Cisco Unified Communications Manager Unified CM のデプロイを識別するための Python ベースのスキャナおよび検証ツール。 機能 Cisco Unified CM インスタンスを検出 WebDialer の公開状態を確認 単一ターゲットおよびバルクスキャンをサポート オプションの PoC 検証機能を含む シンプルなコマンドラインインターフェース 使用方法 python3 scanner.py...

NPM: Payload: Sort queries could expose protected field information

NPM: Payload: Sort queries could expose protected field information vulnerability discovered by ? in WordPress Npm payload versions 3.88.0...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are affected by an Improper Certificate Validation vulnerability within the proxy-server component. An unauthenticated attacker located on an adjacent network could exploit this flaw to cause information exposure of storage backend adm...

CVE-2026-67270

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

EUVD-2026-93458

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...