CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC WordPress 的 InfiniteWP Client 插件（版本至 1.11.1 及包括该版本）存在敏感信息泄露漏洞。该漏洞允许具有订阅者级别或更高权限的已认证攻击者提取包含配置详细信息在内的敏感数据。利用此漏洞的前提是插件尚未进行过配置。当与另一个任意插件安装和激活漏洞结合使用时，可能导致对站点的远程管理以及潜在的权限提升。...

Trinity Audio <= 5.21.0 - Information Exposure

The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the /admin/inc/phpinfo.php file that gets created on install. This makes it possible for...

Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. id: CVE-2022-48164 info: name: Wavlink WL-WN533A8 M33A8.V5030.190716 - Information...

WordPress 3D FlipBook <= 1.16.17 - Information Disclosure

WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery plugin versions = 1.16.17 contain a missing authorization vulnerability in multiple AJAX endpoints. The fb3dsendpostsin, fb3dsendpostpages, fb3dsendpostsinpages, fb3dsendpostsinfirstpage, and fb3dsendpostfirstpage handlers are...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

opencspm

OpenCSPM Open Cloud Security Posture Management, OpenCSPM, es una plataforma de código abierto para obtener una visión más profunda de la configuración y los metadatos de su nube, ayudando a comprender y reducir el riesgo a lo largo del tiempo. ¿Para quién es OpenCSPM? Equipos de seguridad que...

CVE-2026-25049

🚨 CVE-2026-25049 – n8n Unauthenticated Settings Disclosure 📌 Overview CVE ID: CVE-2026-25049 Affected Software: n8n Severity: Critical Category: Improper Access Control / Information Disclosure This vulnerability allows unauthenticated access to internal configuration data via a REST API endpoint...

CVE-2026-0305

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

EUVD-2026-75259

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected...

CVE-2025-56801

CVE-2025-56801 Vulnerabilidad de generación de IV AES-CFB en la aplicación de escritorio de Reolink 1. Resumen Nombre : Aplicación de escritorio de Reolink Versión : 8.18.12 Vendedor : Reolink CWE : CWE-1204: Generación de vector de inicialización IV débil, CWE-321: Uso de clave criptográfica...

Prisma Access Agent: Information Disclosure Vulnerability on Linux

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials. The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected. Work around: No known workarounds or...

The vulnerability of the `compat_mtw_from_user()` function in the `net/bridge/netfilter/ebtables.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compatmtwfromuser function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the bpf_prog_test_run_skb() function in the net/bpf/test_run.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

EUVD-2026-62959

In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and read or modify connection and configuration data through the Representational State Transfer REST API. The missing authorization ...

CVE-2026-76394

Splunk AI Toolkit versions below 6.0.0 have multiple REST API handlers that fail to enforce authorization checks, allowing low-privileged users (without admin or power roles) to start/stop/configure containers and read/modify connection and configuration data. CVSS 8.3 HIGH; remediation is to upg...

EUVD-2026-60568

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

PT-2026-76904

Name of the Vulnerable Software and Affected Versions WPAdverts – Classifieds Plugin versions prior to 2.3.3 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attackers to retriev...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-72793

SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing anonymous or publish-reader users to obtain the session-cookie signing key, OS username via pandoc path, and encrypted-notebook key material. Attackers can forge and tamper with...