CVE-2013-4868

Karotz API 12.07.19.00: Session Token Information Disclosure...

PT-2025-6512 · Zettlr · Zettler 130.8005 Tcp/Ip Gateway

Name of the Vulnerable Software and Affected Versions: Zettler 130.8005 TCP/IP Gateway version 12h Description: A buffer over-read issue was discovered, affecting the web server and allowing information disclosure. This can be triggered by leveraging a memory leak, enabling a remote unauthenticat...

PT-2025-6208 · Tableau +1 · Tableau Server +1

Name of the Vulnerable Software and Affected Versions: Opcenter Intelligence versions prior to V2501 Description: A personal access token disclosure vulnerability has been identified in Opcenter Intelligence, which is related to Tableau Server. This issue allows for the disclosure of personal...

CVE-2024-10285 CE21 Suite <= 2.2.0 - JWT Token Disclosure

The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to log in the user associated with the JWT token...

CVE-2024-9627 TeploBot - Telegram Bot for WP <= 1.3 - Telegram Bot Token Disclosure

The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'serviceprocess' function in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to view the Telegram Bot...

WordPress TeploBot - Telegram Bot for WP plugin <= 1.3 - Telegram Bot Token Disclosure vulnerability

WordPress TeploBot - Telegram Bot for WP plugin = 1.3 - Telegram Bot Token Disclosure vulnerability discovered by István Márton in WordPress Plugin TeploBot - Telegram Bot for WP versions = 1.3...

Element 安全漏洞

Element is a Matrix web collaboration client from Element Open Source. A security vulnerability exists in Element that stems from a vulnerability that could lead to an access token disclosure under certain circumstances...

WordPress Bot for Telegram on WooCommerce plugin <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass vulnerability

Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Bot for Telegram on WooCommerce versions = 1.2.7...

CVE-2024-25694

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in the Layer Showcase application configuration which when clicked could potentially execute...

Versa Director 安全漏洞

Versa Director is a virtualization and service creation platform from Versa USA. that simplifies the creation, automation and delivery of services using Versa FlexVNF. A security vulnerability exists in Versa Director that stems from allowing an attacker to disclose authentication tokens via...

CVE-2024-47162

In JetBrains YouTrack, CVE-2024-47162 describes token exposure on the Imports page for YouTrack versions before 2024.3.44799. The root cause is token data being revealed in the Import workflow, enabling an attacker with access to the Imports page to obtain sensitive information. The affected comp...

CVE-2024-31842

Italtel Embrace 1.6.4 is affected by a vulnerability where the web application inserts an authenticated user’s access token into GET requests. The token appears in the URL’s query string and can be stored in browser history, Referer headers, web logs, or other sources, enabling attackers to use t...

PT-2024-4652 · Jenkins · Jenkins Bitbucket Branch Source Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket Branch Source Plugin versions 886.v44cf5e4ecec5 and earlier Description: The issue is related to the disclosure of information through log files. In some cases, the Bitbucket OAuth access token is printed as part of the...

Token Disclosure

github.com/fluxcd/source-controller is vulnerable to Token Disclosure though logs. The vulnerability is due to improper credential masking in error statements when the source-controller encounters an error when connecting to Azure Blob Storage, resulting in the Azure SAS token being logged along...

Wings 安全漏洞

Wings is the server control interface for Pterodactyl Panel. A security vulnerability exists in Wings versions prior to 1.11.12, which stems from a Wings token that can be accidentally disclosed by viewing the node configuration, allowing an attacker to use it to gain write and read access to...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the Luxe Beauty Clinic applet that may disclose access tokens...

CloudLinux CageFS 7.1.1-1 Token Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CloudLinux CageFS Token Disclosure Link: https://github.com/sbaresearch/advisories/tree/public/2020/SBA-ADV-20200707-01CloudLinuxCageFSTokenDisclosure Vulnerability Overview CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in DRAGON FAMILY. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in platinum clinic. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue with F.B.P members. A remote attacker could exploit the vulnerability to send a malicious notification to the victim...