29647 matches found
WordPress plugin SureDash 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-33237 · Suredash · Suredash
Name of the Vulnerable Software and Affected Versions: SureDash versions through 1.1.0 Description: SureDash is susceptible to a flaw that permits the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: Update SureDash to a version...
PT-2025-33390 · Nordicmade · Savoy
Name of the Vulnerable Software and Affected Versions: NordicMade Savoy versions through 3.0.8 Description: An issue exists in NordicMade Savoy that allows the retrieval of embedded sensitive data due to exposure of sensitive system information to an unauthorized control sphere. Recommendations: ...
PT-2025-33398 · Steve Burge · Taxopress
Name of the Vulnerable Software and Affected Versions: TaxoPress versions through 3.37.2 Description: An insertion of sensitive information into sent data issue exists in Steve Burge TaxoPress, allowing retrieval of embedded sensitive data. Recommendations: At the moment, there is no information...
PT-2025-33318 · Cisco · Cisco Secure Firewall Management Center (Fmc)
Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Management Center FMC Software affected versions not specified Description: A flaw exists in the web-based management interface of Cisco Secure Firewall Management Center FMC Software that could allow a remote attacker...
WordPress plugin TaxoPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-52335
EyouCMS 1.7.3 is vulnerale to Cross Site Scripting XSS in index.php, which can be exploited to obtain sensitive information...
PT-2025-33138 · Ctrlx Os · Ctrlx Os
Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the web application of the ctrlX OS setup mechanism allowed an authenticated attacker with low privileges to gain remote access to backup archives created by a user with...
WordPress Savoy Theme <= 3.0.8 is vulnerable to Sensitive Data Exposure
Software Savoy Type Theme Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2025-54736 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f4b4625ac3c8 Credits Ananda Dhakal Patchstack Required...
Cisco Secure Firewall Management Center 安全漏洞
Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco USA. A security vulnerability exists in Cisco Secure Firewall Management Center that stems from insufficient input validation and could lead to the disclosure of sensitive information...
CVE-2025-25231
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests read-only to restricted API endpoints...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via a python dependency. An attacker can execute arbitrary code, escalate privileges, access sensitive information, and tamper with data by injecting malicious input. Remediation A fix was pushed into the master...
Sensitive Data Exposure
@finos/git-proxy is vulnerable to sensitive data exposure. The vulnerability is due to improper validation of commits in the pack sent to GitHub, which allows an attacker to inject unreferenced commits containing sensitive data and retrieve them via direct commit URLs without appearing in the...
Vulnerabilities fixed in Microsoft Exchange Server
Microsoft has fixed vulnerabilities in Microsoft Exchange Server. The vulnerabilities in Microsoft Exchange Server result from improper input validation and the improper handling of special elements, which allow unauthorized attackers to manipulate data and forge communications. This can lead to...
Vulnerabilities fixed in Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...
PT-2025-34541 · Github Actions · Boldestdungeon/Steam-Workshop-Deploy +1
Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...
The vulnerability of the `kernfs_should_drain_open_files()` function in the `kernfs` component of the Linux operating system allows a attacker to disclose sensitive information.
The vulnerability of the kernfsshoulddrainopenfiles function in the kernfs component of the Linux operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to disclose protected information...
CVE-2025-55165
Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...
CVE-2025-55165 Autocaliweb Exposure of Sensitive Information to an Unauthorized Actor in `config_sql.py`
Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database. Prior to version 0.8.3, the debug pack generated by Autocaliweb can expose sensitive configuration data, including API keys. This occurs because the todict method, used ...