bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

GenAI-LLM-Top10

OWASP Top 10 for Large Language Model Applications !IMPORTANT Current release: 2026 — published August 4, 2026. Get the 2026 publication · Read the canonical source · Report a correction This is the official source repository for the OWASP Top 10 for Large Language Model Applications , maintained...

CVE-2026-82102

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a server-side request forgery (SSRF) vulnerability (CWE-918). This flaw exists because open source packages used for overall processing in the product do not sufficiently restrict outgoing requests, potentially allowing a remote...

CVE-2026-91868

IBM Security QRadar EDR software versions 3.12 through 3.12.26 are vulnerable to improper access control (CWE-284). This flaw could allow a remote authenticated attacker to obtain sensitive information . IBM has addressed this vulnerability in version 3.12.27 . To remediate, customers are encoura...

CVE-2025-53700

A CWE-922 Insecure Storage of Sensitive Information vulnerability exists in several Johnson Controls products, including iSTAR Ultra , iSTAR Ultra SE , iSTAR Ultra G2 , iSTAR Ultra G2 SE , and iSTAR Edge G2 . The flaw allows for CAPEC-15 File Manipulation . This vulnerability affects devices runn...

GitMiner

⚠️ Repository Deprecated — Project Replaced This repository is no longer maintained and has been officially deprecated. The project continues under active development at: https://github.com/unkl4b/Gitminer3 Please migrate to GitMiner3 to access the latest updates, improvements, and active support...

CVE-2021-43798-grafana_fileread

CVE-2021-43798-grafanafileread If the target is behind a reverse proxy, replace the payload with this one: url1 = url +"/public/plugins/"+str.rstripplugins+"//../..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd" Grafana is a cross-platform, open-source data visualization web application...

kingfisher

Detect and Validate Secrets Anywhere. Map Access. Revoke Fast. Find leaked secrets. Validate what’s live. Map the blast radius. Revoke fast. Kingfisher is a fast, free, open-source secret scanner and credential response tool built in Rust. It detects leaked secrets with hundreds of built-in rules...

EUVD-2026-125517

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Spectra: from n/a through 2.20.5...

CVE-2024-9014

This post is a research article published by EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 Sensitive Information Exposure PoC ★ Description CVE-2024-9014 : pgAdmin4 Sensitive Information Exposure description: pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication...

EUVD-2026-125282

Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

wpjuicer

wpjuicer WP Juicer Tool for quick scanning of confidential information on WordPress endpoints. This script is exclusively for Wordpress and facilitates the localization of sensitive information in framework endpoints, aiding in recognition and data extraction by providing detailed results. The ma...

CVE-2026-121518

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.127.0 via the 'search' parameter of the crshowmoreallreviews and crshowmorereviews AJAX actions. This is due to the handlers being hooked on wpajaxnopriv...

CVE-2026-121518

The Customer Reviews for WooCommerce plugin for WordPress (versions up to and including 5.127.0 ) is vulnerable to Sensitive Information Exposure via the search parameter in the cr_show_more_all_reviews and cr_show_more_reviews AJAX actions. The root cause is that handlers are hooked on wp_ajax_n...

CVE-2026-121518 Customer Reviews for WooCommerce <= 5.127.0 - Unauthenticated Sensitive Information Exposure in 'search' Parameter

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.127.0 via the 'search' parameter of the crshowmoreallreviews and crshowmorereviews AJAX actions. This is due to the handlers being hooked on wpajaxnopriv...

EUVD-2026-124992

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 5.127.0 via the 'search' parameter of the crshowmoreallreviews and crshowmorereviews AJAX actions. This is due to the handlers being hooked on wpajaxnopriv...

EUVD-2026-124981

The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to generic SQL Injection via the 'sourceId' parameter in all versions up to, and including, 2.24.1 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-116436

Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-116426

Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 are vulnerable to an Insertion of Sensitive Information into Log File vulnerability (CWE-532). A low privileged attacker with remote access could exploit this flaw to cause Information exposure . No specific exploit information or remediation...