CVE-2026-33692

WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker compose configuration. The official docker-compose.yml mounts the entire project root directory as the Apache document root, causing the .env file — which...

CVE-2025-52024

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services,...

HPE UIoT Unauthorized Access Vulnerability Vulnerability

HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE, USA. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in the DSM portal and DSM APIs in HPE UIoT. A remote attacker could exploit the...