Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

CVE-2021-35042

CVE-2021-35042: Django SQL injection vulnerability I. نظرة عامة Django هو إطار تطبيق ويب مفتوح المصدر، مكتوب بلغة Python، مبني على نموذج MVC Model - View - Controller. تم بناؤه في البداية لإدارة مواقع الويب لمحتوى الأخبار المملوكة لمجموعة النشر Lawrence، وهو نظام إدارة محتوى CMS. توجد ثغرة SQL...

EUVD-2026-95010

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

CVE-2026-105823

...

CVE-2026-105823 ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

CVE-2026-27886

CVE-2026-27886 استغلال Strapi PoC للاختبارات الأمنية المصرح بها فقط. تسريب Strapi للبيانات الحساسة عبر التصفية العلائقية بسبب نقص تعقيم الاستعلامات. يتضمن: CVE-2026-27886.py - PoC بلغة Python CVE-2026-27886.yaml - قالب Nuclei للكشف ما يتحقق منه يرسل المدقق طلبين إلى نقطة نهاية مجموعة واجهة برمجة...

LinksysLeaks

LinksysLeaks سكربت Python3 لفحص أجهزة Linksys الذكية القابلة للاتصال WiFi المعرّضة لثغرة CVE-2014-8244 أُنشئ هذا السكربت لمساعدتي في العثور على أجهزة WiFi الذكية القابلة للاتصال التي تسرّب معلومات حساسة، والمعروفة بثغرة CVE-2014-8244. لديك خيار إما فحص عنوان IP واحد أو ملف نصي يحتوي على عناوين IP...

webkitgtk: Visiting a maliciously crafted website may leak sensitive data

A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks...

CVE-2026-91725

Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-77915

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information...

SUSE CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-75101

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfreesensitive for derived key buffers cryptokrb5prepareencryption and cryptokrb5preparechecksum free the buffer holding the freshly derived keys with plain kfree, leaving the key material behind in the freed...

CVE-2025-46808 Sensitive information is leaked into NeuVector’s manager container logs

An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log This issue affects neuvector: before 5.4.5...

CVE-2026-87482

Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-80924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: krb5 - use kfreesensitive for derived key buffers cryptokrb5prepareencryption and cryptokrb5preparechecksum free the buffer holding the freshly derived...

CVE-2026-80792: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix use-after-free in ip6finishoutput2 ip6finishoutput2 caches a pointer to the IPv6 destination address daddr before invoking lwtunnelxmit. The LWT-BPF transmit path or other encapsulation operations within lwtunnelxmit ca...

USN-8690-1: Pillow vulnerability

It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or read sensitive data...

CVE-2026-82727 AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashphoenix writes the entire raw submitted param map into an exception message, so secrets submitted alongside a union form field leak into logs, crash reports and the dev error page. When AshPhoenix.Form.Au...

CVE-2026-82580

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashai discloses internal error text to chat users. In AshAi.ToolLoop and AshAi.Tools, an exception raised while executing a tool was serialized verbatim with Exception.message/1 into the tool-result content...