CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

Mlflow < 2.17.0 - Local File Inclusion

Mlflow before 2.17.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2024-8859...

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 is vulnerable to cross-site scripting via the segments/add.php Segment Name field. id: CVE-2018-1000856 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 is vulnerable to cross-site scripting via the...

CVE-2024-9014

Этот пост — исследовательская статья, опубликованная EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 Уязвимость раскрытия конфиденциальной информации PoC ★ Description CVE-2024-9014 : pgAdmin4 Уязвимость раскрытия конфиденциальной информации Описание: версии pgAdmin 8.11 и более ранние уязвимы к ошибке...

EUVD-2026-95322

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials...

PT-2026-108885

Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0...

CVE-2026-78795

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information...

CVE-2026-107232

A flaw was found in AsyncHttpClient. When an HTTP proxy rejects a connection tunnel request, the client mistakenly assumes that an encrypted tunnel was established. Subsequent redirect or authentication handlers then transmit the original request and its Authorization headers over the plaintext...

djangohunter

Djangohunter Инструмент, предназначенный для помощи в выявлении неправильно настроенных приложений Django, которые раскрывают конфиденциальную информацию. https://www.reddit.com/r/django/comments/87qcf4/28165thousanddjangorunningserversareexposed/...

CVE-2026-84891

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials...

CVE-2025-22828

CVE-2025-22828 📜 설명 Apache CloudStack 4.16.0 이상 버전에는 리소스 UUID를 알고 있는 사용자가 접근 권한이 없는 리소스에 대해 댓글주석을 읽거나 추가할 수 있게 하는 손상된 접근 제어 문제가 있습니다. UUID는 사용자가 처음에 리소스에 접근할 수 있었지만 관리 제한으로 인해 나중에 접근 권한을 상실하는 경우 등 애플리케이션의 여러 부분에서 노출될 수 있습니다. 🔍 취약점 세부 정보 유형: 손상된 접근 제어 영향: 주석 및 잠재적으로 민감한 데이터에 대한 무단 접근 영향을 받는 버전:...

CVE-2026-84274

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

CVE-2026-53713

A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...

EUVD-2026-95237

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the...

CVE-2024-1209

CVE-2024-1209 Раскрытие конфиденциальной информации через задания в LearnDash. Неаутентифицированные посетители могут просматривать и скачивать загруженные задания. Уязвимость: CVE-2024-1209 Раскрытие конфиденциальной информации через задания CVSS: 5.3 Средний Программное обеспечение: LearnDash...

CVE-2021-43798-grafana_fileread

CVE-2021-43798-grafanafileread Если объект обработан через обратный прокси, можно заменить payload на этот url1 = url +"/public/plugins/"+str.rstripplugins+"//../..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd" Grafana — это кроссплатформенная веб-платформа с открытым исходным кодом для...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Утечка конфиденциальной информации через файл журнала Описание: Плагин Cloud Templates & Patterns collection для WordPress уязвим к раскрытию конфиденциальной информации во всех версиях до 1.2.2 включительно через файл журнала с...

CVE-2026-14273

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...