The vulnerability of the retrieveById() function in the Laravel Passport OAuth2 server implementation allows a hacker to gain unauthorized access to protected information.

The vulnerability of the retrieveById function in the Laravel Passport OAuth2 server implementation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library allows attackers to influence the integrity of the protected information.

The vulnerability of the Log4j1XmlLayout component in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties, allowing a hacker to gain access to protected information.

The vulnerability of the Synology SSL VPN Client lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the UPnP Device Host Service in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the UPnP Device Host Service in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the insufficient validation of requests on the server side, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to access control errors, allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to access control errors. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the Flare file-sharing platform, related to bypassing authentication using a user-controlled key, allows attackers to influence the confidentiality of protected information.

The vulnerability of the Flare file-sharing platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to influence the confidentiality of the protected information...

PT-2026-32995

The Avada Fusion Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1. This is due to the plugin's fusion get post custom field function failing to validate whether metadata keys are protected underscore-prefixed. This makes it...

CVE-2026-1314 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sendpostpagesjson function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticat...

CVE-2026-32171

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

Azure Logic Apps Elevation of Privilege Vulnerability

Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...

CVE-2026-0234

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...

ROS-20260414-73-0061

A vulnerability in the f2fsdecompresscluster function of the fs/f2fs/compress.c module of the F2FS file system of the Linux kernel is related to insufficient resource locking. Exploitation of the vulnerability may allow an intruder to affect the integrity and availability of protected information...

CVE-2026-34262: Insufficiently Protected Credentials

Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...

The vulnerability of the `configfs_create_dir()` function in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the configfscreatedir function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of NetworkManager’s software for managing network connections, related to improper storage of permissions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NetworkManager software for managing network connections is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the DB2 Recovery Expert for LUW tool, related to the lack of control data for verifying integrity, allows an attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the DB2 Recovery Expert for LUW tool relates to the absence of control data for verifying integrity. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity and accessibility of protected information...

The vulnerability of GLib libraries relates to incorrect restrictions on path names to the catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the GLib library set is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of the libssh library, related to incorrect pathname restrictions for the directory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libssh library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...