CVE-2025-68515

CVE-2025-68515 affects the WordPress plugin WP Booking System (Roland Murg) up to version 2.0.19.12. The issue is an information disclosure flaw caused by insertion of sensitive data into sent data, enabling retrieval of embedded sensitive data. There is no explicit exploitation status in the pro...

CVE-2025-68515 WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

CVE-2025-14480

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-13616

IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 returns sensitive information in an HTTP response that could be used in further attacks against the system...

PT-2026-23578

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Acronis Cyber Protect Cloud Agent versions prior to build 41124 Description The software contains a flaw related to insufficient authorization checks, potentially leading to sensitive...

PT-2026-23588

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 versions prior to build 41186 Description The software exhibits unnecessary transmission of sensitive cryptographic material. There is no information about the number of potentially affected devices worldwide or any...

PT-2026-23460

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbs http/sync.Rs and program routin...

PT-2026-23481

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.3.3 Description Nginx UI is a web user interface for the Nginx web server. A critical flaw exists where the '/api/backup' endpoint is accessible without authentication. When this endpoint is accessed, the server...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

PT-2026-23214

Name of the Vulnerable Software and Affected Versions RadiusTheme Classified Listing versions through 5.3.4 Description An issue exists in RadiusTheme Classified Listing that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Upda...

Trivy Action 安全漏洞

Trivy Action is a container vulnerability scanning tool developed by Aqua Security. Version 1.8.12 of Trivy Action contains a security vulnerability; this vulnerability stems from the inclusion of malicious code, which may lead to the collection and disclosure of sensitive information...

WordPress plugin Chaty 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Chaty suffers from an information disclosure vulnerability that can be exploit...

WordPress plugin Classified Listing 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Classified Listing, whic...

PT-2026-23451

Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

PT-2026-23265

Insertion of Sensitive Information Into Sent Data vulnerability in Joe Dolson My Tickets my-tickets allows Retrieve Embedded Sensitive Data.This issue affects My Tickets: from n/a through = 2.1.0...

CVE-2025-70949

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel...

PT-2026-23139

Name of the Vulnerable Software and Affected Versions Roland Murg WP Booking System versions through 2.0.19.12 Description The Roland Murg WP Booking System contains a flaw that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations...

CouchAuth 安全漏洞

CouchAuth is an authentication API developed by Perfood. Version 0.26.0 of CouchAuth contains a security vulnerability. This vulnerability stems from observable time differences, which may allow access to sensitive information through timing side channels...

PT-2026-23512

Name of the Vulnerable Software and Affected Versions @perfood/couch-auth version 0.26.0 Description A timing discrepancy exists in @perfood/couch-auth version 0.26.0 that could allow attackers to access sensitive information through a timing side-channel. Recommendations At the moment, there is ...