Microsoft SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability — Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
2026 Data Breaches Year-to-Date (747 indexed)
Wing FTP Server Information Disclosure Vulnerability — Wing FTP Server contains a
Wing FTP Server Information Disclosure Vulnerability — Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
Baydöner
1,266,822 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 5 more
Divine Skins
105,814 records exposed — Email addresses, Purchases, Usernames
Google Skia
Google Skia Out-of-Bounds Write Vulnerability — Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerabil
Google Chromium V8
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability — Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerabil
n8n n8n
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability — n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for
Omnissa Workspace One UEM
Omnissa Workspace ONE Server-Side Request Forgery — Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with
SolarWinds Web Help Desk
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on t
Ivanti Endpoint Manager (EPM)
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability — Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticat
Hikvision Multiple Products
Hikvision Multiple Products Improper Authentication Vulnerability — Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and
Provecho
712,904 records exposed — Email addresses, Usernames
View incident → Indexed 4 months, 1 week ago
Quitbro
22,874 records exposed — Email addresses, Partial dates of birth, Usernames
View incident → Indexed 4 months, 1 week ago
Lovora
495,556 records exposed — Display names, Email addresses, Profile photos
View incident → Indexed 4 months, 1 week ago
KomikoAI
1,060,191 records exposed — AI prompts, Email addresses, Forum posts, Names
View incident → Indexed 4 months, 1 week ago
Odido
6,077,025 records exposed — Bank account numbers, Customer service records, Dates of birth, Driver's licenses and 7 more
Canadian Tire
38,306,562 records exposed — Dates of birth, Email addresses, Genders, Names and 4 more
CarGurus
12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more
View incident → Indexed 4 months, 2 weeks ago
CarMax
431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 4 months, 3 weeks ago
Figure
967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
View incident → Indexed 4 months, 3 weeks ago
Canada Goose
581,877 records exposed — Device information, Email addresses, IP addresses, Names and 4 more
View incident → Indexed 4 months, 3 weeks ago
APOIA.se
450,764 records exposed — Email addresses, Names, Physical addresses
View incident → Indexed 4 months, 3 weeks ago
University of Pennsylvania
623,750 records exposed — Charitable donations, Dates of birth, Email addresses, Genders and 7 more
View incident → Indexed 4 months, 3 weeks ago
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
View incident → Indexed 5 months ago