6998 matches found
PT-2025-38767
Name of the Vulnerable Software and Affected Versions Nurul Amin WP System Information versions through 1.5 Description A flaw exists in Nurul Amin WP System Information that allows the retrieval of embedded sensitive data, leading to exposure of sensitive system information to an unauthorized...
WordPress Core <= 6.8.2 is vulnerable to Sensitive Data Exposure
Software WordPress Type WordPress Core Vulnerable versions = 6.8.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-58246 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1cbfa3e3eda1 Credits Abu Hurayra Required...
PT-2025-38787
Name of the Vulnerable Software and Affected Versions WPeMatico RSS Feed Fetcher versions through 2.8.10 Description A flaw exists in etruel WPeMatico RSS Feed Fetcher that could allow unauthorized retrieval of embedded sensitive data. The issue involves the exposure of sensitive system informati...
PT-2025-38865
Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions through 6.7.0.61 Description A flaw exists in Ays Pro Quiz Maker that could allow unauthorized retrieval of embedded sensitive data. The issue involves exposure of sensitive system information to an unauthorized...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
ZTE T5400 License Issue Vulnerability
The ZTE T5400 is a router from China's ZTE Corporation ZTE. The ZTE T5400 suffers from an authorization issue vulnerability, which stems from improper control of web module interface privileges, and can be exploited by an attacker to obtain sensitive information...
PT-2025-38437
Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX EXOSYS M5521cdn affected versions not specified Description An issue in the user interface allows remote attackers to obtain sensitive information by inspecting sent packages. Recommendations At the moment, there is n...
CVE-2025-43190
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...
webvulnscanner
Web Vulnerability Scanner A Python-based tool designed for ethic...
CVE-2025-55834
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component...
CVE-2025-7743 Sensitive Data Exposure in Dolusoft's Omaspot
Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation. This issue affects Omaspot: before 12.09.2025...
CVE-2025-7743
The CVE-2025-7743 entry concerns Dolusoft Omaspot, with a root cause described as cleartext transmission of sensitive information leading to interception and potential privilege escalation. Public sources in the connected set repeatedly reference prior versions of Omaspot (pre-12.09.2025) as affe...
ZTE T5400 安全漏洞
The ZTE T5400 is a router from China's ZTE Corporation ZTE. The ZTE T5400 suffers from an authorization issue vulnerability, which stems from improper control of web module interface privileges, and can be exploited by an attacker to obtain sensitive information...
PT-2025-37565
Name of the Vulnerable Software and Affected Versions: AVTECH EagleEyes Lite version 2.0.0 Description: The GetHttpsResponse method transmits sensitive information – including internal server URLs, account IDs, passwords, and device tokens – as plaintext query parameters over HTTPS. The affected...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Enterprise_Linux
PoC exploit for CVE-2020-2732. It is an exploit for the PlayStation 4 on 5.05 firmware. The exploit targets the kernel and allows for arbitrary code execution. The exploit includes autolaunching code for Mira and Vortex's HEN payload. The bug was discovered by qwertyoruiopz. The exploit includes...
WordPress Themia Lite Theme <= 1.5.0 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by Legion Hunter in WordPress Theme Themia Lite versions = 1.5.0...
WordPress WP Mailgun SMTP Plugin <= 1.0.7 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by Legion Hunter in WordPress Plugin WP Mailgun SMTP versions = 1.0.7...
WordPress WP SendGrid SMTP Plugin <= 1.0.6 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by Legion Hunter in WordPress Plugin WP SendGrid SMTP versions = 1.0.6...