WordPress Instantio plugin <= 3.3.30 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Que Thanh Tuan in WordPress Plugin Instantio versions = 3.3.30...

CVE-2026-28856

The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-28856

The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-20699

A downgrade issue in Apple macOS affecting Intel-based Mac computers allows an application to potentially access user-sensitive data . The vulnerability was addressed by implementing additional code-signing restrictions . This issue is fixed in macOS Sequoia 15.7.5 , macOS Sonoma 14.8.5 , macOS T...

CVE-2026-28876

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. An app may be able to access sensitive user da...

CVE-2026-28820

This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data...

CVE-2026-28866

A vulnerability in the Clipboard component of Apple products allows an app to access sensitive user data due to insufficient validation of symlinks. This issue affects iOS 18.7.7 , iPadOS 18.7.7 , iOS 26.4 , iPadOS 26.4 , macOS Sequoia 15.7.5 , macOS Sonoma 14.8.5 , and macOS Tahoe 26.4 . The fla...

The vulnerability of the _nfs4_discover_trunking() function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the nfs4discovertrunking function in the fs/nfs/nfs4proc.c module, which is part of the NFS client support in Linux kernel, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the sev_launch_measure() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to access protected information or cause service failures.

The vulnerability of the sevlaunchmeasure function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to protected...

The vulnerability of the nf_conntrack_confirm() function in the include/net/netfilter/nf_conntrack_core.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfconntrackconfirm function in the include/net/netfilter/nfconntrackcore.h header file of the Linux operating system leads to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the zfcp_fsf_req_send() function in the drivers/s390/scsi/zfcp_fsf.c module of the SCSI device driver on the S390 Linux operating system platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zfcpfsfreqsend function in the drivers/s390/scsi/zfcpfsf.c module of the SCSI device driver on the S390 Linux operating system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the module include/uapi/linux/capability.h of the Linux operating system allows a perpetrator to gain access to protected information or cause a service failure.

The vulnerability in the include/uapi/linux/capability.h module of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the ena_init() function in the drivers/net/ethernet/amazon/ena/ena_netdev.c file of the Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the enainit function in the drivers/net/ethernet/amazon/ena/enanetdev.c file of the Ethernet network adapter driver for the Linux operating system exposes confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the setup_bootmem() function in the arch/riscv/mm/init.c file of the module for the subsystem of module management on the RISCV architecture of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the setupbootmem function in the arch/riscv/mm/init.c file of the module for the RISCV architecture subsystem of the Linux operating system’s kernel architecture is related to the copying of a buffer without checking the size of the input data a classic buffer overflow attack...

PT-2026-28120

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation...

Apple多款产品 安全漏洞

Apple iOS and other products are owned by the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is IBM's enterprise-class data integration platform for data quality management and ETL processing. An information disclosure vulnerability exists in IBM InfoSphere Information Server that stems from a query string of an HTTP GET request that could expose sensiti...

PT-2026-27580

The issue was addressed with improved authentication. This issue is fixed in iOS 26.4 and iPadOS 26.4, visionOS 26.4, watchOS 26.4. An attacker with physical access to a locked device may be able to view sensitive user information...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is IBM's enterprise-class data integration platform for data quality management and information integration. A security vulnerability exists in IBM InfoSphere Information Server that stems from the manipulability of JSON server responses. An attacker can exploit...

Apple macOS 安全漏洞

Apple macOS Tahoe is an operating system from the American company Apple. A security vulnerability exists in Apple macOS Tahoe, which stems from a directory path resolution issue that can be exploited by attackers to cause an application to access sensitive user data...