CVE-2026-86450

The DetaWix Mobile Web Portal by Parla Auto Automotive Trading Limited Company is vulnerable to a Sensitive Data Exposure issue in versions before v1.0.19 . This vulnerability allows for Accessing Functionality Not Properly Constrained by ACLs , which can result in the exposure of sensitive infor...

CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin BackupEase versions = 2.2.2...

WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin StifLi Backup Tools versions = 2.2.7...

Insufficient Technical Documentation

Apache Tomcat is vulnerable to Insufficient Technical Documentation. The vulnerability is due to insufficient security configuration guidance, which could allow an administrator to deploy Tomcat with an insecure EncryptInterceptor configuration and potentially expose protected cluster communicati...

CVE-2020-5248

CVE-2020-5248 CVE-2020-5248에 대한 개념 증명PoC. 요약 GLPI 9.4.6 이전 버전에는 기본 암호화 키와 관련된 취약점이 있습니다. GLPIKEY는 공개되어 있으며 모든 인스턴스에서 사용됩니다. 이는 누구나 이 키를 사용하여 저장된 민감한 데이터를 복호화할 수 있음을 의미합니다. GLPI를 설치하기 전에 키를 변경하는 것이 가능합니다. 그러나 기존 인스턴스에서는 데이터를 새 키로 다시 암호화해야 합니다. 문제는 데이터베이스에서 어떤 열이나 행이 그 키를 사용하는지 알 수 없다는 것입니다. 특히...

CVE-2021-33558.

CVE : CVE-2021-33558. Эксплойт для CVE-2021-33558 Краткое описание В Boa/0.94.13 присутствуют различные ошибки конфигурации. Они раскрывают различную чувствительную информацию. Доказательство концепции https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js...

LinksysLeaks

LinksysLeaks Скрипт на Python3 для сканирования устройств Linksys smart wifi, уязвимых для CVE-2014-8244 Этот скрипт был создан, чтобы помочь мне найти уязвимые smart wifi устройства, которые утекают конфиденциальную информацию, известную как CVE-2014-8244. У вас есть возможность сканировать либо...

CVE-2023-4800

Идентификатор CVE: CVE-2023-4800 Тип уязвимости: Раскрытие конфиденциальных данных Описание: Плагин DoLogin Security для WordPress уязвим к несанкционированному доступу к данным из-за отсутствия проверки прав на виджете панели управления в версиях до 3.7 включительно. Это позволяет...

Security update for erlang27

This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...

WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin WPMobile.App versions = 11.83...

CVE-2025-6980-check

Проверка раскрытия чувствительной информации Arista NGFW Сканер Arista NGFW CVE-2025-6980 от Bishop Fox Проверяет цель на раскрытие информации CVE-2025-6980 Не выполняет никаких административных действий на целевой системе Для получения дополнительной информации об этой уязвимости обратитесь к...

CVE-2024-33453

CVE-2024-33453 Раскрытие конфиденциальных данных через контроль доступа на уровне объектов в esp-idf Описание Уязвимость переполнения буфера в фреймворке esp-idf версии 5.1, используемом некоторыми продуктами Schoolbox, позволяет удаленному злоумышленнику получить конфиденциальную информацию из-з...

CVE-2021-38314

CVE-2021-38314 인증되지 않은 민감 정보 노출 CVE-2021–38314...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

CVE-2025-24271

CVE-2025-24271 AirPlay 취약점으로 Apple 기기에서 민감한 정보가 노출됨 [email protected] https://m10.com.mx/cve-2025-24271-vulnerabilidad-en-airplay-expone-informacion-sensible-en-dispositivos-apple/ Apple은 다음 운영 체제가 취약하다고 확인했습니다: macOS Sequoia 15.4 macOS Sonoma 14.7.5 macOS Ventura 13.7.5 iOS 18.4 iPadOS 17.7...

CVE-2022-39196-

CVE-2022-39196 Black board CMS 권한 상승 Blackboard Learn 버전 1.10.1은 원격 인증 사용자가 학생 자격 증명을 입력한 다음 특정 webapps/bbcms/execute/ URL을 직접 방문하여 의도하지 않은 파일을 읽을 수 있게 합니다. 추가 정보 1단계: 학생 자격 증명 권한을 사용합니다. 사용자 이름: 및 비밀번호: 으로 로그인합니다. 2단계: "STUDENT" 계정 권한으로 성공적으로 로그인한 후. 3단계: 그런 다음 "취약점 URL / 위치"를 요청합니다. 4단계: 권한 요구 ...

CVE-2026-100669

Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...

CVE-2026-11871 Team Showcase Supreme <= 9.2 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details

The Team Members WordPress plugin through 9.2 does not perform any authorization or visibility check in an unauthenticated AJAX action that returns full team member records by ID, allowing unauthenticated attackers to enumerate and disclose details, including email addresses and phone numbers, of...