Information disclosure.

Thinkware U3000 TCP Service GET_STATUS information disclosure

• Thinkware U3000
• Information disclosure
• Broken access control

Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

• Apache Software Foundation Apache Roller
• Information disclosure

Eyeplus p2pcam Service snapshot information disclosure

• Eyeplus
• Information disclosure
• Broken access control

Eyeplus ONVIF Device GetUsers information disclosure

• Eyeplus
• Information disclosure
• Broken access control

Verge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file

• Verge3D Publishing and E-Commerce
• Information disclosure

UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice

• UpdraftPlus: WP Backup & Migration Plugin
• Information disclosure

Duplicate Advisory: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary

• Information disclosure

<3.12.2 · fixed in 3.12.2

heym before 0.0.91 Multiple Secrets Plaintext Storage

• heym
• Information disclosure

AzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profile

• AzuraCast
• Information disclosure

Froxlor before 2.3.12 Credential Disclosure via DirProtections API

• froxlor
• Information disclosure

Froxlor before 2.3.12 DKIM Private Key Disclosure via API

• froxlor
• Information disclosure

Froxlor before 2.3.13 Private Key Disclosure via Certificates API

• froxlor
• Information disclosure

Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib

• kyverno
• Information disclosure

Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast

• budibase server
• Information disclosure

Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

• budibase server
• Information disclosure

stoatchat before 0.15.5 Account Enumeration via Error Location

• stoatchat
• Information disclosure

Grav before 2.0.25 Session Cookie Theft via Twig Sandbox

• grav
• Information disclosure

Grav before 2.0.25 Sandbox Escape via array Filter

• grav
• Information disclosure

SiYuan before v3.8.4 Clipboard Data Disclosure via IPC

• siyuan
• Information disclosure

Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery

• parse-community parse-server
• Information disclosure

capgo.app through 12.129.0 Cache Restoration of Deleted Bundles

• Cap-go capgo.app
• Information disclosure

MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

• MCP Server for WordPress
• Information disclosure

File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure

• File Manager
• Information disclosure

Team Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_details

• Team Members
• Information disclosure

OpenClaw before 2026.7.1 Authorization Bypass via diagnostics

• OpenClaw
• Information disclosure

OpenClaw before 2026.7.1 Authorization Bypass via trajectory export

• OpenClaw
• Information disclosure

OpenClaw iOS before 2026.8.11 Credential Storage via Share Extension

• OpenClaw
• Information disclosure

OpenClaw before 2026.8.1 Unauthorized Command Job Access

• OpenClaw
• Information disclosure

OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback

• OpenClaw
• Information disclosure

OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash

• OpenClaw
• Information disclosure

OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

• OpenClaw
• Information disclosure

Flame through 2.4.0 Information Exposure via GET /api/config

• pawelmalak flame
• Information disclosure

Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata

• horilla-hr
• Code injection
• Information disclosure

Cross-request disclosure of CentralAuth cookies in Wikipedia Android App

• Wikimedia Foundation Wikipedia Android App
• Information disclosure

Revision-deleted pages can be viewed through WikiLambda's action=edit and Special:ViewAbstract

• Wikimedia Foundation Mediawiki - WikiLambda Extension
• Information disclosure

Cross-origin credential leak in HTTP stream wrapper redirects

• PHP
• Information disclosure
• Hard-coded credentials

Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens

• zammad
• Information disclosure
• CWE-116

Zammad: Missing rate limiting allows password brute-forcing during two-factor login

• zammad
• Information disclosure
• Authentication bypass

Zammad: Sensitive Information Exposure in Integration Administration API

• zammad
• Information disclosure
• Hard-coded credentials

Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data

• zammad
• Information disclosure
• Broken access control

Zammad: Cross-User Taskbar Item Access Control Vulnerability

• zammad
• Information disclosure
• Broken access control

Zammad: Titles of knowledge base answers will be shown across all categories via the global search

• zammad
• Information disclosure
• Broken access control

RabbitMQ: Federation and Shovel Gen-Servers Lack format_status Callback — Plaintext Credentials Exposed in Crash Dumps and sys:get_status

• rabbitmq-server
• Information disclosure

RabbitMQ: OAuth2 Client Secret Exposed via Unauthenticated JavaScript Endpoint

• rabbitmq-server
• Information disclosure

RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login

• rabbitmq-server
• Information disclosure

InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments

• InvoicePlane
• Information disclosure

Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE

• Google gVisor
• Privilege escalation
• Information disclosure

Incomplete property masking in the SANnav logging subsystem

• Brocade SANnav
• Information disclosure

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 before 08-08-2023 allows a remote attacker to obtain sensitive information via the…

• Information disclosure

FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

• FluteCode Secure Folder
• Information disclosure

Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a

• Brocade SANnav
• Information disclosure

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

• Brocade SANnav
• Information disclosure

Botslab G980H Dashcams Insertion of Sensitive Information into Log File

• Botslab G980H
• Information disclosure

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

• Information disclosure

<1.5.16 · fixed in 1.5.16

Podman: Malformed Image can trick podman run into leaking host environment variables into the container

• Information disclosure

>=1.8.1 · no fixed version yet

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

• Brocade SANnav
• Information disclosure

Plaintext exposure of sensitive authentication data in SANnav discovery service log files

• Brocade SANnav
• Information disclosure

Dozzle label filters do not restrict container event and statistics streams

• Information disclosure
• Broken access control

<1.29.1-0.20260622172006-19c01e0fb491 · fixed in 1.29.1-0.20260622172006-19c01e0fb491

TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)

• mauriceboe TREK
• Information disclosure
• Broken access control

TREK MCP trip summary bypasses delegated OAuth read scopes

• mauriceboe TREK
• Information disclosure
• Broken access control