CVE-2025-14480

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-13616

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

PT-2026-23460

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs http/sync.Rs and program routin...

PT-2026-23481

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.3.3 Description Nginx UI contains a critical flaw where the /api/backup endpoint is accessible without authentication. When this endpoint is accessed via a GET request, the server provides a full system backup and...

PT-2026-23588

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description The software exhibits unnecessary transmission of sensitive cryptographic material. There is no information about the number of potentially affected devices worldwide or any...

PT-2026-23578

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Acronis Cyber Protect Cloud Agent versions prior to build 41124 Description The software contains a flaw related to insufficient authorization checks, potentially leading to sensitive...

PT-2026-23265

Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through = 2.1.0...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

WordPress plugin Classified Listing 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Classified Listing, whic...

Trivy Action 安全漏洞

Trivy Action is a container vulnerability scanning tool developed by Aqua Security. Version 1.8.12 of Trivy Action contains a security vulnerability; this vulnerability stems from the inclusion of malicious code, which may lead to the collection and disclosure of sensitive information...

PT-2026-23214

Name of the Vulnerable Software and Affected Versions RadiusTheme Classified Listing versions through 5.3.4 Description An issue exists in RadiusTheme Classified Listing that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Upda...

PT-2026-23451

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

WordPress plugin Chaty 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Chaty suffers from an information disclosure vulnerability that can be exploit...

RustDesk Server PRO 安全漏洞

RustDesk Server PRO is a set of remote desktop server management scripts developed by RustDesk’s individual developers. Versions of RustDesk Server PRO prior to 1.7.5 contained security vulnerabilities, which stemmed from the transmission of sensitive information in plain text, potentially allowi...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

RustDesk Server PRO 安全漏洞

RustDesk Server PRO is a set of remote desktop server management scripts developed by RustDesk’s individual developers. Versions of RustDesk Server PRO prior to 1.7.5 contained security vulnerabilities, which stemmed from the use of defective encryption algorithms. These vulnerabilities could lea...

PT-2026-23139

Name of the Vulnerable Software and Affected Versions Roland Murg WP Booking System versions through 2.0.19.12 Description The Roland Murg WP Booking System contains a flaw that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations...

CVE-2025-70949

Summary: CVE-2025-70949 affects @perfood/couch-auth v0.26.0. The vulnerability is an observable timing discrepancy that creates a timing side-channel, potentially allowing an attacker to access sensitive information during authentication. The available documents do not disclose a fixed version; r...

CouchAuth 安全漏洞

CouchAuth is an authentication API developed by Perfood. Version 0.26.0 of CouchAuth contains a security vulnerability. This vulnerability stems from observable time differences, which may allow access to sensitive information through timing side channels...