PT-2026-106371

Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...

CVE-2026-67270: Improper Certificate Validation

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

PT-2026-106472

Unauthenticated Sensitive Data Exposure in Snapshotify All-in-One Backup & Restore & Migrate = 1.3.2 versions...

PT-2026-106471

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

PT-2026-106470

Unauthenticated Sensitive Data Exposure in Museder RestoreOne = 2.7.276 versions...

PT-2026-107305

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package allows potential file exposure when the local TechDocs publisher is used via the techdocs.publisher.type variable set to 'local'. In this configuration,...

PT-2026-106388

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning = 1.5.17 versions...

PT-2026-106321

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user handler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

PT-2026-107298

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains a sensitive information exposure issu...

PT-2026-106368

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

PT-2026-106332

Unauthenticated Sensitive Data Exposure in Sitemovr = 1.0.1 versions...

PT-2026-106457

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

PT-2026-107301

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package allows sensitive information exposure within scaffolder task logs. An authenticated user with permissions to create and read scaffolder tasks can...

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

PT-2026-106468

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

PT-2026-106416

Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-103433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through...

PT-2026-107125

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76747 Vendor → Unknown Severity → Critical — CVSS 9.1 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

nginx

CVE-2017-7529 당승표@portfolio10 Riepilogo Questo laboratorio riproduce la vulnerabilità della cache CVE-2017-7529 che si verifica durante l'elaborazione delle richieste Range nel server Nginx, e il comportamento effettivo della vulnerabilità Vulnerabilità: possibile esposizione di dati memorizzati...

MSMQ-Vulnerability

Laboratorio di Sicurezza MSMQ Questo repository documenta una revisione controllata in laboratorio dell'esposizione di sicurezza di Microsoft Message Queuing, concentrandosi su validazione difensiva, evidenze di rilevamento e pianificazione della mitigazione. Il progetto è posizionato come...