CVE-2025-4364

CVE-2025-4364 affects Assured Telematics Fleet Management System (IoT fleet solution). The connected documents describe an unauthenticated access vulnerability that could disclose system information and enable access to administrative credentials. The primary sources (CISA ICS advisory ICSA-25-14...

Assured Telematics Fleet Management System 安全漏洞

Assured Telematics Fleet Management System is an IoT solution for fleet management from Assured Telematics that provides real-time vehicle tracking, driving behavior analysis, fuel efficiency optimization, and maintenance schedule management capabilities for logistics and transportation and fleet...

CVE-2025-39394

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP allows Retrieve Embedded Sensitive Data.This issue affects AnalyticsWP: from n/a through 2.1.2...

CVE-2025-31062

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects Wishlist: from n/a through = 2.1.0...

CVE-2025-32299 WordPress QuickCal <= 1.0.15 - Sensitive Data Exposure Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themovation QuickCal allows Retrieve Embedded Sensitive Data. This issue affects QuickCal: from n/a through 1.0.15...

CVE-2025-46742

Users who were required to change their password could still access system information before changing their password...

Fortinet FortiClient Index of FCT installation directory publicly accessible (FG-IR-24-548)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-548 advisory. - An Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability CWE-497 in FortiClientWindows...

CVE-2025-46742

Users who were required to change their password could still access system information before changing their password...

CVE-2025-46742 Improper Access Control

Users who were required to change their password could still access system information before changing their password...

CVE-2025-46742 Improper Access Control

Users who were required to change their password could still access system information before changing their password...

MAL-2025-4079 Malicious code in frau-hoster (npm)

This packages collect system information and attempt to send it to remote servers, details include hostname, OS, IP address, username and current working directory. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in @skip-partner/i18n (npm)

This package is attempting to send system information, like hostname, user, current working directory and user id to an external server --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 980936be9121e5c676851d9936d40ab77cc3e1f8be85e93a7bc081dd6c47dd9c Any computer that...

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

Exploit for Deserialization of Untrusted Data in Spip

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upl...

Exploit for Code Injection in Craftcms Craft_Cms

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview...

CVE-2025-42604

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...

CVE-2025-42604

CVE-2025-42604 affects Meon KYC solutions. The root cause is that debug mode is enabled in certain API endpoints, which an attacker could access to receive unauthorized API responses that disclose detailed system information. The available documents describe the vulnerability as an information di...

CVE-2025-42604 Detailed Error Response Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...

Meon KYC 安全漏洞

Meon KYC is a solution from Meon India. A security vulnerability exists in Meon KYC that stems from debug mode being enabled on certain API endpoints, which could lead to the disclosure of system related information...

CVE-2025-39439 WordPress wpLike2Get plugin <= 1.2.9 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Markus Drubba wpLike2Get allows Retrieve Embedded Sensitive Data. This issue affects wpLike2Get: from n/a through 1.2.9...