138501 matches found
CVE-2026-97309
The RepairBuddy computer-repair-shop WordPress plugin, developed by Webful Creations , is vulnerable to a Missing Authorization flaw in versions up to and including 4.1226 . This vulnerability allows an attacker to Retrieve Embedded Sensitive Data from the application. While the technical root ca...
EUVD-2026-92588
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226...
CVE-2026-103334
The Five Star Restaurant Reservations WordPress plugin (versions
CVE-2026-97309 WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226...
CVE-2026-103334 WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...
EUVD-2026-92585
Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...
CVE-2025-27636-Practical-Lab
🛡️ CVE-2025-27636 — Laboratorio Práctico de Explotación para Apache Camel 🔍 Resumen CVE-2025-27636 es una vulnerabilidad crítica de Ejecución Remota de Código RCE en Apache Camel , específicamente en el componente camel-exec. Surge de un problema sutil pero peligroso: DefaultHeaderFilterStrategy...
LinksysLeaks
LinksysLeaks Script en Python3 para escanear dispositivos smart wifi de Linksys vulnerables a CVE-2014-8244 Este script fue creado para ayudarme a encontrar dispositivos smart wifi vulnerables que filtran información sensible, conocida como CVE-2014-8244. Tienes la opción de escanear una sola IP ...
CVE-2024-24919-Exploit
CVE-2024-24919-Exploit Overview This repository contains a python exploit for the CVE-2024-24919, a vulnerability that allows you to read sensitive files from the vulnerable page. This exploit first checks if the target is vulnerable, and then gets the path you specify. Severity : Critical Usage...
CVE-2023-4800
ID de CVE: CVE-2023-4800 Tipo de Vulnerabilidad: Exposición de datos sensibles Descripción: El plugin DoLogin Security para WordPress es vulnerable al acceso no autorizado de datos debido a una verificación de capacidad faltante en el widget del panel de administración en versiones hasta la 3.7...
CVE-2023-49545
CVE-2023-49545 Customer Support System 1.0 - 目录列表 描述 ：Customer Support System v1 存在一个目录列表漏洞，攻击者无需身份验证/授权即可列出应用程序中的目录和敏感文件。 受影响产品版本 ：Customer Support System 1.0 CVE 作者 ：Geraldo Alcântara 日期 ：2023年11月28日 确认日期 ：2023年12月19日 CVE ：CVE-2023-49545 测试环境 ：Windows 复现步骤： 1. 导航至...
CVE-2024-22534
CVE-2024-22534 Vulnerabilidad de Fuga de Información encontrada en la herramienta de despliegue OneinStack que está filtrando endpoints de información sensible a través del Panel de control. La vulnerabilidad provoca la Fuga de Información Sensible a través de phpinfo.php, xprober.php y ocp.php...
CVE-2024-23747
CVE-2024-23747 El Sistema de Gestión Hospitalaria ModernaNet 2024 de Moderna Sistemas es susceptible a una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR. PoC Esta vulnerabilidad reside en el manejo que hace el sistema del acceso a los datos de usuario a través de una URL...
USN-8870-1 aodh, watcher vulnerability
Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and that the OpenStack Watcher webhook trigger endpoint did not apply authorization. An attacker could possibly use this issue to access sensitive alarm metadata or trigger unauthorized...
EUVD-2026-92430
CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information...
CVE-2026-92931
The @progress/sitefinity-nextjs-sdk npm package (versions 15.1.8326 through 15.4.8637 ) is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918). This flaw may allow a remote attacker to force the server to make requests to an attacker-controlled host , which could lead to the exposure of ...
CVE-2026-105073
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2026-39783
Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7...
Astra Linux – Vulnerability in Ansible
A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...