Astra Linux – Vulnerability in Chromium

A heap buffer overflow in Skia in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Vim

Vim is an open-source command-line text editor. From version 9.2.0320 to 9.2.0679, a crafted undo or swap file could store a virtual-text property whose offset and length points outside the line’s property data. When Vim restores or displays such a line, it converts the offset into a pointer and...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Some SMB1 write requests were not properly range-checked to ensure that the client had sent enough data to complete the write operation. As a result, the contents of the server’s memory were written to the file or printer, rather than the data provided by the clien...

BIT-APACHE-2026-47360 Apache HTTP Server: mod_session: Session cookie not removed during internal redirect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's modsessioncookie module. When SessionCookieRemove changes across internal redirects, the session cookie may still be passed to a backend server. This issue affects Apache HTTP Server: from 2.4.0...

CVE-2026-39783 WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7...

CVE-2026-39783 WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7...

CVE-2026-39783

The WP SYNTEX Polylang plugin (versions n/a through 3.8.7 ) is vulnerable to a Missing Authorization vulnerability (CWE-862 ). This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific exploit details or remediation steps are provided in the documents.

WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Polylang versions = 3.8.7...

WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...

CVE-2026-105073

The WP Event Solution plugin for WordPress (versions n/a through 4.1.25 ) is vulnerable to Sensitive Data Exposure (CWE-497). This flaw allows an unauthorized actor to Retrieve Embedded Sensitive Data from the system. The vulnerability is classified as MEDIUM severity with a CVSS3.1 score of 5.3 ...

CVE-2026-105073 WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25...

CVE-2026-105073 WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25...

WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ismayil Tahmazov in WordPress Plugin Xserver Migrator versions = 1.6.6...

WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin WP Event Solution versions = 4.1.25...

WordPress Motors plugin <= 1.4.124 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Motors versions = 1.4.124...

nuclei-CiscoRV320Dump-CVE-2019-1653

Cisco Router Configuration Exposure Vulnerability Descripción de la Vulnerabilidad Este repositorio detalla el proceso de explotación de una vulnerabilidad en ciertos routers Cisco que permite la exposición del archivo de configuración config.exp mediante una URL pública accesible. Este archivo...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Almacenamiento-de-Contraseña-en-Texto-Plano-CVE-2024-4232...

CVE-2020-29666

CVE-2020-29666 Listado de directorios Descripción sugerida En Lan ATMService M3 ATM Monitoring System 6.1.0, debido a una vulnerabilidad de listado de directorios, un atacante remoto puede ver archivos de registro, ubicados en /websocket/logs/, que contienen los valores de cookies de un usuario y...

CVE-2023-40600

CVE-2023-40600 EWWW Image Optimizer = 7.2.0 - Exposición de Información Sensible no Autenticada a través del Registro de Depuración Descripción El plugin EWWW Image Optimizer para WordPress es vulnerable a la Exposición de Información Sensible en todas las versiones hasta la 7.2.0 incluida, a...

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteVault – Backup, Restore, Migration & Cloning versions = 1.5.17...