EUVD-2025-28095

Malicious code in bioql PyPI...

CVE-2025-59163

CVE-2025-59163 describes a DNS rebinding vulnerability in the vet MCP Server SSE Transport within the open-source vet tool (github.com/safedep/vet). The issue arises from missing validation of HTTP Host and Origin headers, enabling remote attackers to access data from the vet scan sqlite3 databas...

GHSA-6Q9C-M9FR-865M vet MCP Server SSE Transport DNS Rebinding Vulnerability

SafeDep vet is vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. To exploit this vulnerability following conditions must be met: 1. A vet scan is executed and reports are saved as sqlite3 database 2. A vet MCP server is running on default port with SSE...

PT-2025-39909

Name of the Vulnerable Software and Affected Versions vet versions prior to 1.12.5 Description The software is susceptible to a DNS rebinding attack because of missing HTTP Host and Origin header validation. When used as an MCP server in SSE mode with default ports, the sqlite3 database containin...

CVE-2025-60140

Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through = 1.3.3...

CVE-2025-59010

Insertion of Sensitive Information Into Sent Data vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Retrieve Embedded Sensitive Data.This issue affects Permalink Manager Lite: from n/a through = 2.5.1.3...

CVE-2025-11025

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0...

CVE-2025-11025 Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0...

CVE-2025-11025

The CVE-2025-11025 entry covers the Vimesoft Corporate Messaging Platform. Affected versions are V1.3.0 through V2.0.0, with a root cause described as insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Impact per sources indicates information disclos...

PT-2025-39572

Name of the Vulnerable Software and Affected Versions Themelooks FoodBook versions through 4.7.1 Description An issue exists in Themelooks FoodBook that allows for the retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update to a versio...

PT-2025-39542

Name of the Vulnerable Software and Affected Versions Stackable versions through 3.18.1 Description A flaw exists in Benjamin Intal Stackable that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Stackable to a version...

PT-2025-39637

Name of the Vulnerable Software and Affected Versions Vimesoft Corporate Messaging Platform versions 1.3.0 through 1.9.9 Description A flaw exists in Vimesoft Corporate Messaging Platform that allows for the retrieval of embedded sensitive data. This issue involves the insertion of sensitive...

CVE-2025-58249

Insertion of Sensitive Information Into Sent Data vulnerability in Themeum Qubely qubely allows Retrieve Embedded Sensitive Data.This issue affects Qubely: from n/a through = 1.8.14...

CVE-2025-57923

Insertion of Sensitive Information Into Sent Data vulnerability in Ideal Postcodes UK Address Postcode Validation uk-address-postcode-validation allows Retrieve Embedded Sensitive Data.This issue affects UK Address Postcode Validation: from n/a through = 3.9.2...

UBUNTU-CVE-2025-58246

Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a fix. This is a low-severity vulnerability. Contributor-level privileges required in order to...

WordPress plugin Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-57922

Insertion of Sensitive Information Into Sent Data vulnerability in Coordinadora Mercantil S.A. Envíos Coordinadora Woocommerce coordinadora allows Retrieve Embedded Sensitive Data.This issue affects Envíos Coordinadora Woocommerce: from n/a through = 1.1.32...

PT-2025-38912

Name of the Vulnerable Software and Affected Versions Themeum Qubely versions through 1.8.14 Description A flaw exists in Themeum Qubely that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations Update Themeum Qubely to ...

CVE-2023-49367

An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user...

CVE-2025-5519

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6...