MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

EUVD-2026-122263

Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability...

PoC_CVE-2023-24055

PoCCVE-2023-24055 How to run ? Edit the $User var in the script and replace value with your Username. Open a PowerShell as administrator and run the script : ./PoCCVE-2023-24055.ps1 After the script execution open KeePass. Result is stored under "C:\Users\yourusername\AppData\Local\Temp\output.xm...

Astra Linux – Vulnerability in Intel Microcode

A domain-bypass transient execution vulnerability in some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure through local access...

Astra Linux – Vulnerability in Linux 5.10, Intel-Microcode

Incomplete cleanup of microarchitectural fill buffers on some Intel processors may allow an authenticated user to potentially enable information disclosure via local access...

Astra Linux – vulnerability in intel-microcode

Improper access control on certain third-generation IntelR XeonR Scalable Processors prior to BIOS version MR7 may allow a local attacker to potentially enable information disclosure via local access...

CVE-2026-89075 MOVEit Transfer Local Disclosure of Session Information Vulnerability

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89075 MOVEit Transfer Local Disclosure of Session Information Vulnerability

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-89075

Progress MOVEit Transfer is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). The issue specifically impacts versions before 2025.1.6 and versions from 2026.0.0 before 2026.0.4 . This vulnerability allows for the local disclosure of session information . Exploitati...

CVE-2026-109971

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

CVE-2026-70208

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally...

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Windows Secure Kernel Mode Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96948: Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70261: Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85916: Azure Active Directory Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...

PT-2026-112853

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description An issue in Azure Active Directory allows an unauthorized actor to disclose private personal information locally, which can lead to the acquisition of sensitive information and...

PT-2026-112818

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Drivers affected versions not specified Description An issue exists where sensitive information is inserted into log files, allowing an authorized attacker to disclose this information locally and potentially affect the...

PT-2026-113173

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-79817

A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager . An attacker with local access to the affected system could exploit this flaw to obtain sensitive information. The vulnerability is assigned a CVSS 3.1 score of 5.5 (Medium) ...