CVE-2013-4786: IPMI v2.0 Password Hash Disclosure Vulnerability
CVE-2013-4786 is a high-severity information disclosure flaw in the IPMI v2.0 specification that allows remote attackers to obtain password hashes for valid…
Tag: information disclosure
CVE-2025-68686: Fortinet FortiOS SSL-VPN Information Disclosure
A medium-severity information disclosure vulnerability in FortiOS SSL-VPN (CVSS 5.3) allowing remote unauthenticated attackers to bypass a patch for symbolic link persistency.…
CVE-2025-55190: Argo CD API Token Credential Exposure
A flaw in Argo CD where an API token with basic read access could retrieve Git repository credentials from a project. Patched…
CVE-2026-42880: Argo CD Read-Only User Secret Exposure
A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.
PTC FlexPLM
A product lifecycle management software from PTC for retail, footwear, and apparel. Contains a pre-authentication information disclosure flaw in its WSDL endpoint…
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…
CVE-2026-4020: Gravity SMTP WordPress Plugin Information Disclosure Vulnerability
CVE-2026-4020 is a medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, affecting versions prior to 2.1.5. The flaw allows unauthenticated…