16972 matches found
AntD Admin - Sensitive Information Disclosure
AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...
LearnPress < 4.2.6.8.1 - Information Disclosure
LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by incorrect implementation of getitemspermissionscheck function in all versions up to 4.2.6.8, letting unauthenticated attackers extract user emails and basic information. id: CVE-2024-5483 info: name: LearnPress...
CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...
vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak
vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...
Event Monster <= 1.4.3 - Information Exposure Via Visitors List Export
The Event Monster Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.3 via the Visitors List Export file. During the export, a CSV file is created in the wp-content folder with a hardcoded filename...
User Profile Picture < 2.5.0 - Sensitive Information Disclosure
The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
TrakSYS 11.x.x - Sensitive Data Exposure
A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. The attack may be initiated remotely. The exploit has been...
AVM FRITZ!Box 7530 AX - Unauthorized Access
An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. id: CVE-2024-54767 info: name: AVM FRITZ!Box 7530 AX - Unauthorized Access author: DhiyaneshDK severity: high description: | An access...
RastLeak
RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: pip install -r requirements.txt To install wget: sudo pip install wget Version The last stable version i...
CVE-2026-121243
An information leak flaw was found in the Frames component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513451861...
CVE-2026-121235
An information leak flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540040995...
GitMonitor
GitMonitor GitMonitor One way to continuously monitor sensitive information that could be exposed on Github Summary I know that there are many other tools available for finding sensitive information currently leaked on Github, I myself still use some of them. However, I think they still lack some...
CVE-2026-121125
An information leak flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517434186...
CVE-2026-121254
An information leak flaw was found in the Select component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562225118...
CVE-2026-121239
An information leak flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563355450...
CVE-2026-121158
An information leak flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569005114...
CVE-2026-121132
An information leak flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/564190098...