EUVD-2025-4727

Malicious code in bioql PyPI...

EUVD-2025-10803

Malicious code in bioql PyPI...

EUVD-2024-32895

Malicious code in bioql PyPI...

CVE-2025-60140

Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through = 1.3.3...

PT-2025-39189

Name of the Vulnerable Software and Affected Versions WordPress versions through 6.8.2 Description A flaw exists in WordPress that could allow retrieval of embedded sensitive data through insertion of sensitive information into sent data. The issue is considered low severity and requires...

PT-2025-38891

Name of the Vulnerable Software and Affected Versions iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery versions through 1.16.16 Description A flaw exists in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery that allows the retrieval of embedded sensitive...

CVE-2025-58866

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info site-info-dashboard-widget allows Retrieve Embedded Sensitive Data.This issue affects Site Info: from n/a through = 1.1...

CVE-2025-41415

The vulnerability, if exploited, could allow an authenticated miscreant with privileges to access publication targets to retrieve sensitive information that could then be used to gain additional access to downstream resources...

PT-2025-34353 · Nootheme · Jobmonster

Name of the Vulnerable Software and Affected Versions: NooTheme Jobmonster versions through 4.8.0 Description: A vulnerability exists in NooTheme Jobmonster that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere...

CVE-2025-53988

Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through = 1.3.18...

CVE-2025-53998

CVE-2025-53998 (JetWooBuilder) : In Crocoblock JetWooBuilder (JetWooBuilder) vulnerable to insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Affected: JetWooBuilder versions up to and including 2.1.20. Root cause per sources: exposure of sensitive d...

CVE-2025-6632

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-50870

Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...

CVE-2025-34142

CVE-2025-34142 : ETQ Reliance on the CG (legacy) platform is affected via the /resources/sessions/sso endpoint. The SAML handler processes XML without disabling external entity resolution, enabling XXE that could disclose sensitive files or enable SSRF. Remediation in the reports specifies disabl...

CVE-2024-13786

The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via deserialization of untrusted input in the 'themerexcallbackviewmoreposts' function. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP...

CVE-2025-6464

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.44.2 via deserialization of untrusted input in the 'entrydeleteuploadfiles' function. This makes it possible for unauthenticat...

PT-2025-27207 · Zealousweb · Zealousweb Accept Stripe Payments Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: ZealousWeb Accept Stripe Payments Using Contact Form 7 versions 3.0 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For ZealousW...

CVE-2025-49419

CVE-2025-49419 pertains to Foxit eSign for WordPress. The connected sources describe an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability, enabling retrieval of embedded sensitive data. Affected product: Foxit eSign for WordPress, versions from n/a through 2...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...

CVE-2025-5598 WF Steuerungstechnik GmbH - airleader MASTER - Path Traversal

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046...