PT-2025-3192 · Unknown · Smart Toilet Lab - Motius

Name of the Vulnerable Software and Affected Versions: Smart Toilet Lab - Motius version 1.3.11 Description: The issue is related to the Smart Toilet Lab - Motius running with debug mode turned on, which exposes sensitive information defined in the Django settings file through a verbose error pag...

CVE-2024-56113

The Smart Toilet Lab - Motius software, version 1.3.11 , is vulnerable to the exposure of sensitive information due to the Django debug mode being enabled (DEBUG = True ). This misconfiguration allows an attacker to access sensitive data defined in the Django settings file through a verbose error...

CVE-2024-10585: Improper Limitation of a Pathname to a Restricted Directory

The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID' parameter of the /debug-chart/index.php file. This makes it possible for unauthenticated attackers to read .txt files outside of the intended directory...

PT-2025-1596

Name of the Vulnerable Software and Affected Versions InfiniteWP Client plugin for WordPress versions up to, and including, 1.13.0 Description The issue allows unauthenticated attackers to read .txt files outside of the intended directory via the historyID parameter of the /debug-chart/index.php...

WordPress plugin InfiniteWP Client has a path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2025-22503

Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...

CVE-2025-22503 WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability

Cross-Site Request Forgery CSRF vulnerability in Digital Zoom Studio Admin debug wordpress – enable debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through 1.0.13...

CVE-2025-22503

CVE-2025-22503 describes a Cross-Site Request Forgery in the WordPress plugin/feature named "Admin debug wordpress – enable debug". Affected versions are listed as up to 1.0.13 (from n/a through 1.0.13). The Wordfence Intelligence entry indicates this vulnerability remains Unpatched for Admin deb...

WordPress Admin debug wordpress – enable debug Plugin <= 1.0.13 - Cross Site Request Forgery vulnerability

Cross Site Request Forgery vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Admin debug wordpress – enable debug versions = 1.0.13...

WordPress plugin: Admin debug WordPress – Enable debug for cross-site request fraud vulnerabilities

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Admin debug wordpress - enable debug A cross-site...

PT-2025-4497 · WordPress · Admin Debug Wordpress – Enable Debug

Name of the Vulnerable Software and Affected Versions: Digital Zoom Studio Admin debug wordpress – enable debug versions 1.0.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It affects the Admin debug wordpress – enable debug, allowing Cross Site Request...

CVE-2025-22503: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in digitalzoomstudio Admin debug wordpress – enable debug dzs-enable-debug allows Cross Site Request Forgery.This issue affects Admin debug wordpress – enable debug: from n/a through = 1.0.13...

Information Exposure

Overview collaborative-article-sharing is a Command-line interface for interacting with the CAS API Affected versions of this package are vulnerable to Information Exposure because the Flask application runs in debug mode in a production environment. Remediation Upgrade...

SUSE CVE-2022-49034

In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar as below when showing /proc/cpuinfo. Fix this by using...

PT-2026-2863

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the scs magic function within the shadow call stack SCS implementation. The function requires a 'void ' variable but receives a 'struct task...

PT-2025-37978

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc2-g6f713187ac98 Description The Linux kernel contains a flaw within the hfcpci module related to timer management. Specifically, unloading the module with CONFIG DEBUG OBJECTS TIMERS enabled can lead to ...

PT-2025-49793

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists within the kernel’s DRM/XE subsystem, specifically in the xe gem fault function, which can lead to an oops kernel panic during the execution of core hotunplug tests. This...

CVE-2024-56683

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/debug/dri/1/hdmi1regs when the hdmi is disconnected results in a fatal system hang. This is due to the pm suspend code disabling the dvp...

CVE-2024-56566

A use-after-free list corruption vulnerability was found in the Linux kernel. If an allocated object fails in allocconsistencychecks, all objects of the slab will be marked as used and the slab will be removed from the partial list. When an object belonging to the slab gets freed later, the...

SUSE CVE-2024-56683

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/debug/dri/1/hdmi1regs when the hdmi is disconnected results in a fatal system hang. This is due to the pm suspend code disabling the dvp...