CVE-2025-12074

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'contextblogmodalpopup' due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from passwor...

CVE-2025-12074

CVE-2025-12074 affects Context Blog (WordPress theme) up to version 1.2.5, enabling unauthenticated information exposure through context_blog_modal_popup due to insufficient post-access restrictions. Impact is exposure of data from password-protected, private, or draft posts. Public advisories fr...

PT-2026-20219

Name of the Vulnerable Software and Affected Versions Context Blog theme for WordPress versions through 1.2.5 Description The Context Blog theme for WordPress is susceptible to information disclosure in versions up to and including 1.2.5. This is due to inadequate restrictions on post inclusion...

Trust Domain Extensions TDX Unauthorized Access

The vulnerability of the Trust Domain Extensions TDX module in Intel microprogramming devices relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe DNG Software Development Kit Heap Buffer Overflow

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

SCADA System Web Server Disclosure

The vulnerability of the FAST/TOOLS SCADA system’s web server is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Adobe Audition Buffer Overflow Info Disclosure

The vulnerability of Adobe Audition relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, provided that the user opens a specially crafted file...

Adobe Audition Buffer Overflow Info Disclosure

The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, provided that the user opens a specially crafted file...

Adobe Substance 3D Modeler Heap Buffer Overflow Info Disclosure

The vulnerability of the Adobe Substance 3D Modeler software-related 3D modeling software is related to reading beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe InDesign Buffer Overflow Info Disclosure

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, provided that the user opens a specially crafted file...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the DeleteBranchPost function. A repository collaborator with Write permission can delete protected branches or the default branch by sending POST requests directly to the web interface, bypassing branch...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the DeleteBranchPost function. A repository collaborator with Write permission can delete protected branches or the default branch by sending POST requests directly to the web interface, bypassing branch...

GHSA-2C6V-8R3V-GH6P Gogs has a Protected Branch Deletion Bypass in Web Interface

Summary An access control bypass vulnerability in Gogs web interface allows any repository collaborator with Write permissions to delete protected branches including the default branch by sending a direct POST request, completely bypassing the branch protection mechanism. This vulnerability enabl...

Gogs has a Protected Branch Deletion Bypass in Web Interface

Summary An access control bypass vulnerability in Gogs web interface allows any repository collaborator with Write permissions to delete protected branches including the default branch by sending a direct POST request, completely bypassing the branch protection mechanism. This vulnerability enabl...

How to Securely Edit and Redact Sensitive PDFs: A Cybersecurity Guide

PDF security guide covering redaction, metadata risks, compliance standards, and safe editing of password-protected files to prevent data leaks...

Improper Directory Validation

@anthropic-ai/claude-code is vulnerable to improper directory validation. The vulnerability is due to insufficient validation of directory changes when using the cd command with write operations, which allows an attacker to navigate into protected folders e.g., .claude and create or modify files...

PT-2026-20322

Name of the Vulnerable Software and Affected Versions Gogs versions 0.13.4 and below Description Gogs, an open-source self-hosted Git service, contains an access control bypass issue. Repository collaborators with Write permissions can delete protected branches, including the default branch, by...

Yokogawa FAST/TOOLS SCADA Data Compromise Disclosure

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to the violation of personal privacy. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

Yokogawa FAST/TOOLS SCADA Disclosure Information

The vulnerability of the Yokogawa FAST/TOOLS SCADA system is related to improper security checks for standard components. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through specially crafted queries...

Visiology BI Data Analytics System Unauthorized Access

The vulnerability of Visiology BI data analytics systems lies in the use of strictly encrypted accounting data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...