316 matches found
CVE-2025-12468
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...
CVE-2025-12468
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin (up to version 3.6.4.1) is exposed to unauthenticated sensitive information exposure via the /wc-coupons/ REST API endpoint. The endpoint is registered as a public API (public_api = true) and uses pe...
CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-coupons/' REST API endpoint. This is due to the endpoint being marked as a...
PT-2025-45100
Name of the Vulnerable Software and Affected Versions FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce versions up to and including 3.6.4.1 Description The software contains a flaw that allows unauthenticated attackers to extract sensitive data, including...
Lack of sufficient checks in public API
The affected function is unsound due to insufficient checks on public struct field...
[SECURITY] Fedora 42 Update: qt6-qtwebchannel-6.9.3-1.fc42
The Qt WebChannel module provides a library for seamless integration of C++ and QML applications with HTML/JavaScript clients. Any QObject can be published to remote clients, where its public API becomes available...
ReDoc API Docs UI Exposed
Detects publicly exposed ReDoc API documentation pages. The module performs safe, read-only GET requests and reports likely ReDoc instances based on HTML markers. Module Options msf use auxiliary/scanner/http/redocexposed msf auxiliaryredocexposed show actions ...actions... msf...
[SECURITY] Fedora 42 Update: rust-protobuf-support-3.7.2-1.fc42
Code supporting protobuf implementation. None of code in this crate is public API...
[SECURITY] Fedora 43 Update: rust-protobuf-support-3.7.2-1.fc43
Code supporting protobuf implementation. None of code in this crate is public API...
EUVD-2020-6426
Malware in sbrugna...
EUVD-2018-8832
Malware in sbrugna...
EUVD-2019-3102
Malware in sbrugna...
EUVD-2025-13621
Malicious code in bioql PyPI...
EUVD-2024-50602
Malicious code in bioql PyPI...
EUVD-2023-1619
Malicious code in bioql PyPI...
EUVD-2021-27538
Malicious code in bioql PyPI...
EUVD-2022-49192
Malicious code in bioql PyPI...
EUVD-2025-21362
Malicious code in bioql PyPI...
EUVD-2025-16946
Malicious code in bioql PyPI...
CVE-2025-59843
Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/username returns user email addresses in its JSON response. The fix, intended for release in 2.3.1 but only available starting in version 2.3.2, removes email addresses from public AP...