CVE-2025-31003

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through = 1.6...

CVE-2025-31003

CVE-2025-31003 affects the WordPress plugin Squeeze (versions

CVE-2025-31003 WordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bogdan Bendziukov Squeeze squeeze allows Retrieve Embedded Sensitive Data.This issue affects Squeeze: from n/a through = 1.6...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File. An attacker with access to the log files can gain access to Apache Kafka credentials by accessing these application logs. Remediation Upgrade...

PT-2025-15721 · Squeeze · Squeeze

Name of the Vulnerable Software and Affected Versions: Bogdan Bendziukov Squeeze versions n/a through 1.6 Description: The issue allows exposure of sensitive system information to an unauthorized control sphere, enabling the retrieval of embedded sensitive data. Recommendations: For versions n/a...

CVE-2025-30281 ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitati...

CVE-2025-26686

Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...

CVE-2025-32164 WordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows Retrieve Embedded Sensitive Data.This issue affects m1.DownloadList: from n/a through = 0.24...

CVE-2025-3436 coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection

The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2024-13820

CVE-2024-13820 (Melhor Envio plugin for WordPress): The vulnerability is an unauthenticated sensitive information exposure via a hardcoded hash in the plugin’s run() function, affecting Melhor Envio versions up to 2.15.11 (per Wordfence). Impact per sources includes exposure of environment inform...

PT-2025-15339

Name of the Vulnerable Software and Affected Versions: SamsungContacts versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control, allowing local attackers to access protected data. This affects SamsungContacts, potentially exposing sensitive information...

WordPress Accept SagePay Payments Using Contact Form 7 plugin <= 2.0 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin Accept SagePay Payments Using Contact Form 7 versions = 2.0...

WordPress GreenPay plugin 3.0.0-3.0.9 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin GreenPay versions 3.0.0-3.0.9...

WordPress Melhor Envio plugin <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash vulnerability

Unauthenticated Sensitive Information Exposure via Hardcoded Hash vulnerability discovered by Luciano Hanna in WordPress Plugin Melhor Envio versions = 2.15.11...

SUSE-SU-2025:1158-1 Security update for pam

This update for pam fixes the following issues: - CVE-2024-10041: sensitive data exposure while performing authentications. bsc1232234...

SUSE-SU-2025:20179-1 Security update for skopeo

This update for skopeo fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs bsc1238685 - CVE-2025-27144: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerab...

CVE-2025-32255

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList stafflist allows Retrieve Embedded Sensitive Data.This issue affects StaffList: from n/a through = 3.2.7...

CVE-2024-13604

CVE-2024-13604 affects KB Support – Customer Support Ticket & Knowledge Base Plugin for WordPress. It enables unauthenticated attackers to access the /wp-content/uploads/kbs directory and exfiltrate sensitive data (including ticket attachments) via a Unauthenticated Sensitive Information Exposure...

PT-2025-15048 · WordPress · The Kb Support – Customer Support Ticket & Helpdesk Plugin

Name of the Vulnerable Software and Affected Versions: The KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin plugin for WordPress versions up to, and including, 1.7.4 Description: The issue allows unauthenticated attackers to extract sensitive data stored insecurely in...

WordPress KB Support plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin KB Support versions = 1.7.4...