CVE-2020-36850: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...

PT-2024-18076 · WordPress · Wp Maintenance

Name of the Vulnerable Software and Affected Versions: WP Maintenance plugin for WordPress versions up to, and including, 6.1.6 Description: The issue allows unauthenticated attackers to bypass the plugin's maintenance mode and obtain post and page content via the REST API. Recommendations: For W...

XWiki Platform 安全漏洞

Xwiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company Xwiki. A security vulnerability exists in XWiki Platform that stems from the fact that in the affected version, any user with editing privileges can copy the content of a page to which...