105 matches found
EUVD-2025-35091
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers...
EUVD-2020-29144
Malware in sbrugna...
EUVD-2021-13797
Malware in sbrugna...
EUVD-2020-28347
Malware in sbrugna...
PT-2025-40862
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description The system logs data from POST requests without validation. Specifically, when a user attempts to log in with incorrect credentials, the request data is logged. It is possible to send excessively lar...
EUVD-2024-37245
Malicious code in bioql PyPI...
EUVD-2024-0003
Malicious code in bioql PyPI...
EUVD-2022-27438
Malicious code in bioql PyPI...
EUVD-2022-42958
Malicious code in bioql PyPI...
EUVD-2022-30045
Malicious code in bioql PyPI...
CVE-2025-7371
CVE-2025-7371 affects Okta On-Premises Provisioning (OPP) agents. Data logging vulnerability exists in local OPP agent servers in versions 2.2.1–2.3.0, where administrator-initiated password resets cause the agent to log user personal information and temporary passwords. Affected scenario: an att...
📄 Microsoft Edge Cross Site Scripting Filter Bypass
Microsoft Edge cross site scripting filter bypass proof of concept exploit. Titles: Microsoft Edge XSS Filter Bypass PoC Author: nu11secur1ty Date: 2025-07-18 Vendor: Microsoft Software: Microsoft Edge Browser Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6176 Description Thi...
Exploit for Logging of Excessive Data in Livehelperchat Live_Helper_Chat
Exploit Title: LiveHelperChat 5...
Azure Linux 3.0 Security Update: httpd (CVE-2024-47252)
The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47252 advisory. - Insufficient escaping of user-supplied data in modssl in Apache HTTP Server 2.4.63 and earlier allows an...
CVE-2025-53886
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows with the WebHook trigger all incoming request details are logged including security sensitive data like access and refresh tokens in...
GHSA-X3VM-88HF-GPXP Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged
Summary When using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template string. Impact Malicious admins can log sensitive data from other users when they are created or updated. Workarounds Avoid...
CVE-2025-53885
Directus Flows logs can disclose sensitive user data via the Log to Console operation. Affected: Directus real-time API/dashboard prior to 11.9.0 (versions 9.0.0–11.8.x). Root cause: logging unfettered input during user create/update events, enabling a malicious admin to view other users’ data. I...
PT-2025-29527 · Directus · Directus
Name of the Vulnerable Software and Affected Versions: Directus versions 9.0.0 through 11.8.9 Description: Directus is a real-time API and App dashboard for managing SQL database content. When using Directus Flows with the WebHook trigger, all incoming request details, including security-sensitiv...
CVE-2025-52893 OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...