CVE-2026-110466

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

CVE-2026-110466 WisdomGarden｜Tronclass - Sensitive Data Exposure

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

EUVD-2026-100872

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

CVE-2026-110466

The Tronclass software, developed by WisdomGarden , contains a Sensitive Data Exposure vulnerability (CWE-497). Authenticated remote attackers can bypass anonymous grading restrictions to obtain anonymous student information . No specific patch versions, workarounds, or evidence of in-the-wild ex...

CVE-2026-110466 WisdomGarden｜Tronclass - Sensitive Data Exposure

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

PT-2026-113677

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information...

WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...

CVE-2026-106598

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

CVE-2026-108489

The Active Products Tables for WooCommerce plugin (by PluginUs.Net) versions up to and including 2.1.3 is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows for the retrieval of embedded sensitive data from the application. No specific rem...

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...

CVE-2026-109703

The WPGraphQL plugin for WordPress (versions up to and including 2.23.1 ) is vulnerable to a Missing Authorization (CWE-862) flaw. This vulnerability allows an unauthenticated attacker to Retrieve Embedded Sensitive Data from the wp-graphql component. The issue results in a Medium severity impact...

CVE-2026-109703 WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1...

WordPress WPGraphQL plugin <= 2.23.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin WPGraphQL versions = 2.24.2...

CVE-2023-49367

CVE-2023-49367 - Sensetive Data Exposure Sensetive Data Exposure in Kyocera Printer Web Panel Vendor: Kyocera Corporation Affected Versions: Command Center RX - EXOSYS M5521cdn Description After connecting to the Kyocera interface address book, test requests for smb and ftp can be seen in the sen...

CVE-2023-30146

CVE-2023-30146 - Assmann/HooToo Webcam Exploit - Sensitive Data Exposure Description An issue was discovered in HooToo and Assmann branded IP-Cameras. The firmware stores the administrator and user credentials in the backup in plaintext. The backup can be retrieved and decompressed without...

CVE-2025-51867

CVE-2025-51867 Vulnerability description Deepfiction AI is an AI entertainment company with a mission to revolutionize personalized storytelling. Deepfiction AI provide a web application to create stories by chatting with LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its ch...

CVE-2026-77364

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only duri...

CVE-2023-4800

CVE ID: CVE-2023-4800 Vulnerability Type: Sensitive Data Exposure Description: The DoLogin Security plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dashboard widget in versions up to, and including, 3.7. This makes it possible for...

github-dorks

Github Dorks La búsqueda de GitHub es una característica bastante potente y útil que se puede usar para buscar datos sensibles en repositorios. La colección de dorks de GitHub puede revelar información sensible personal y/u organizacional como claves privadas, credenciales, tokens de autenticació...