Lucene search
+L

61 matches found

Kitploit
Kitploit
added 2026/09/17 7:35 p.m.12 views

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791:内存中敏感信息的明文存储。 Easywork Enterprise 2.1.3.354 存在内存中敏感信息明文存储的漏洞。该应用程序在激活尝试失败后,会将有效的设备绑定许可证密钥留在进程内存中。攻击者可通过附加调试器或分析进程/内存转储来获取这些密钥,随后无需购买即可在同一台机器上激活该软件。...

6.2CVSS5.8AI score0.00101EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 3:42 a.m.9 views

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320:Abacre Restaurant Point of Sale POS 中的内存敏感信息明文存储漏洞。 所有版本(最高至 15.0.0.1656)的 Abacre Restaurant Point of Sale POS 均存在内存中敏感信息明文存储漏洞。在激活尝试期间,应用程序会将有效的、绑定设备的许可证密钥保留在进程内存中。攻击者可通过将进程附加到调试器并分析进程/内存转储来获取这些密钥,然后无需购买即可在同一台机器上激活软件。 下面,我们提供了动态分析和调试器输出的证据,表明这些密钥在激活尝试期间被分配并保留在进程内存中。...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits2
NVD
NVD
added 2026/09/14 1:19 p.m.6 views

CVE-2026-90933

laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete premium module license keys. Attackers with low-privileged accounts can access GET /api/admin/licenses/show, POST...

7.1CVSS0.00219EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 12:48 p.m.6 views

EUVD-2026-77451

laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete premium module license keys. Attackers with low-privileged accounts can access GET /api/admin/licenses/show, POST...

7.1CVSS5.7AI score0.00219EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 12:48 p.m.9 views

CVE-2026-90933

laradashboard through 1.2.2 contains a missing authorization vulnerability in its Local License API endpoints. Any authenticated user with low privileges can access three endpoints — GET /api/admin/licenses/show , POST /api/admin/licenses/store , and POST /api/admin/licenses/remove — to read, ove...

7.1CVSS5.7AI score0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 12:48 p.m.30 views

CVE-2026-90933 laradashboard through 1.2.2 Missing Authorization via License API

laradashboard through 1.2.2 contains a missing authorization vulnerability in the Local License API endpoints that allows any authenticated user to read, overwrite, and delete premium module license keys. Attackers with low-privileged accounts can access GET /api/admin/licenses/show, POST...

7.1CVSS0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/21 5:35 p.m.35 views

CVE-2026-56579 HCL MyCloud was affected with Exposure of Sensitive Information to an Unauthorized Actor.

HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security...

3.1CVSS0.00246EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/21 5:35 p.m.11 views

CVE-2026-56579

HCL MyCloud was affected with License Key Revealed in HTTP Response. It may enable attackers to misuse the exposed information and compromise the application's security...

3.1CVSS5.3AI score0.00246EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.17 views

CVE-2026-7526

The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueueblockassets. This makes it possible for authenticated attackers, with contributor-level access and above, to extract configuration data. License key...

4.3CVSS5.5AI score0.00376EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/28 9:16 a.m.33 views

CVE-2026-7526

The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueueblockassets. This makes it possible for authenticated attackers, with contributor-level access and above, to extract configuration data. License key...

4.3CVSS0.00376EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/05/28 7:43 a.m.21 views

EUVD-2026-32743

The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueueblockassets. This makes it possible for authenticated attackers, with contributor-level access and above, to extract configuration data. License key...

4.3CVSS5.8AI score0.00376EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/18 12:00 a.m.23 views

WordPress plugin Feeds for YouTube 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.4CVSS5.8AI score0.00322EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/04 8:25 a.m.10 views

EUVD-2025-206793

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.5AI score0.00316EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/04 12:00 a.m.19 views

WordPress plugin Magic Import Document Extractor 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00316EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:21 a.m.14 views

CVE-2021-27795

Brocade Fabric OS FOS hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a...

8.1CVSS7AI score0.00244EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/12/13 4:34 a.m.12 views

Sensitive Information Disclosure

Jenkins ReadyAPI Functional Testing Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to storing license keys, client secrets, and passwords in plaintext in job configuration files, allowing users with Item/Extended Read permission or file system access on the...

6.5CVSS6.9AI score0.00367EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/04 12:11 a.m.50 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS6.9AI score0.00245EPSS
SaveExploits2References1
OSV
OSV
added 2025/12/03 4:15 p.m.12 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS5.7AI score0.00245EPSS
SaveExploits2References2
NVD
NVD
added 2025/12/03 4:15 p.m.11 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS0.00245EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/12/03 12:00 a.m.18 views

PT-2025-48939

Name of the Vulnerable Software and Affected Versions Abacre Restaurant Point of Sale POS versions up to 15.0.0.1656 Description The application stores sensitive information, specifically valid device-bound license keys, in process memory during an activation attempt. This could allow unauthorize...

7.5CVSS6.2AI score0.00245EPSS
SaveExploits2References5
Rows per page
Query Builder