CVE-2025-50110

CVE-2025-50110 EagleEyes Lite Androidアプリケーションにおける機密情報の平文送信 1. 概要 名前 : EagleEyesLite バージョン : 2.0.0 ベンダー : AVTECH CWE : CWE-319: 機密情報の平文送信, CWE-598: 機密クエリ文字列を含むGETリクエストメソッドの使用 CVSS : 8.8 高 ベクター文字列 : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. 要約 EagleEyes Lite（バージョン2.0.0）では、GetHttpsResponse...

CVE-2026-76579: Improper Neutralization of Input During Web Page Generation

The LiteSpeed Cache plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'esi' parameter in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2026-11820 Community.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string

A flaw was found in the community.general Ansible collection's nexmo module. The module constructs HTTP requests to the Vonage/Nexmo SMS API by encoding API credentials apikey and apisecret into URL query parameters and sending them via GET requests. This causes credentials to be exposed in web...