Cisco RV132W/RV134W Router - Information Disclosure

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information. id: CVE-2018-012...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

XWiki < 4.10.15 - Sensitive Information Disclosure

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the password hashes of all users to anyone with view right on the respective user profiles. By default, all user profiles are...

Versa Concerto Actuator Endpoint - Authentication Bypass

An authentication bypass vulnerability affected the Spring Boot Actuator endpoints in Versa Concerto due to improper handling of the X-Real-Ip header.Attackers could access restricted endpoints by omitting this header.The issue allowed unauthorized access to sensitive functionality, highlighting...

Kubio AI Page Builder <= 2.5.1 - Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

CVE-2025-24271

CVE-2025-24271 Уязвимость в AirPlay раскрывает конфиденциальную информацию на устройствах Apple [email protected] https://m10.com.mx/cve-2025-24271-vulnerabilidad-en-airplay-expone-informacion-sensible-en-dispositivos-apple/ Apple подтвердила, что следующие операционные системы уязвимы: macO...

PT-2026-104609

The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated users with Author-level access and above to store input that discloses sensitive data, including other users' passwo...

CVE-2026-104402: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...

CVE-2026-97307: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

PT-2026-104622

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

PT-2026-104640

Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6...

WordPress RepairBuddy plugin <= 4.1226 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin RepairBuddy versions = 4.1226...

WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.24...

cve-2017-5487

Что такое CVE-2017-5487? : В версиях WordPress до 4.7.1 реализация REST API в wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php не ограничивает список авторов, что позволяет удаленному атакующему получить важную информацию через запрос wp-json/wp/v2/users. Источник:...

CVE-2024-24919

Эксплойт для CVE-2024-24919 Описание Этот скрипт на Python является эксплойтом для CVE-2024-24919, CVE, которая затронула продукты Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Версии: R77.20 EOL, R77.30 EOL, R80.10...

CVE-2024-10355

Исходный код Бесплатная загрузка ПО для управления АЗС | SourceCodester Описание Уязвимость SQL-инъекции в Petrol pump management software v1.0 от sourcecodester. Была обнаружена уязвимость, оцениваемая как высокорискованная, затрагивающая некоторую неизвестную функциональность файла...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Обход пути в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы к уязвимости обхода пути. Эти уязвимости могут позволить удаленным аутентифицированным злоумышленникам с низкими или высокими привилегиями переходить в места, которые не должны быть доступны пользователю. Это может бы...

CVE-2022-39196-

CVE-2022-39196 Black board CMS 권한 상승 Blackboard Learn 버전 1.10.1은 원격 인증 사용자가 학생 자격 증명을 입력한 다음 특정 webapps/bbcms/execute/ URL을 직접 방문하여 의도하지 않은 파일을 읽을 수 있게 합니다. 추가 정보 1단계: 학생 자격 증명 권한을 사용합니다. 사용자 이름: 및 비밀번호: 으로 로그인합니다. 2단계: "STUDENT" 계정 권한으로 성공적으로 로그인한 후. 3단계: 그런 다음 "취약점 URL / 위치"를 요청합니다. 4단계: 권한 요구 ...

CVE-2026-48907

CVE-2026-48907 Описание Файл CVE-2025-9209.py — это инструмент для массовой эксплуатации, нацеленный на уязвимость CVE-2025-9209. Основные функции: Сканирует список сайтов через вызов /wp-json/wp/v2/users Анализирует ответ для поиска конфиденциальных данных пользователей, таких как открытые и...