Microsoft SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability — Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network.
Latest Disclosures
Wing FTP Server Information Disclosure Vulnerability — Wing FTP Server contains a
Wing FTP Server Information Disclosure Vulnerability — Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
Divine Skins
105,814 records exposed — Email addresses, Purchases, Usernames
Baydöner
1,266,822 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 5 more
Google Skia
Google Skia Out-of-Bounds Write Vulnerability — Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerabil
Google Chromium V8
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability — Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerabil
n8n n8n
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability — n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for
Ivanti Endpoint Manager (EPM)
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability — Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticat
SolarWinds Web Help Desk
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk contain a deserialization of untrusted data vulnerability in AjaxProxy that could allow an attacker to run commands on t
Omnissa Workspace One UEM
Omnissa Workspace ONE Server-Side Request Forgery — Omnissa Workspace One UEM formerly known as VMware Workspace One UEM contains a server-side request forgery (SSRF) vulnerability that could allow a malicious actor with
Hikvision Multiple Products
Hikvision Multiple Products Improper Authentication Vulnerability — Multiple Hikvision products contain an improper authentication vulnerability that could allow a malicious user to escalate privileges on the system and
Provecho
712,904 records exposed — Email addresses, Usernames
View incident → Indexed 4 months, 1 week ago
KomikoAI
1,060,191 records exposed — AI prompts, Email addresses, Forum posts, Names
View incident → Indexed 4 months, 1 week ago
Quitbro
22,874 records exposed — Email addresses, Partial dates of birth, Usernames
View incident → Indexed 4 months, 1 week ago
Lovora
495,556 records exposed — Display names, Email addresses, Profile photos
View incident → Indexed 4 months, 1 week ago
Odido
6,077,025 records exposed — Bank account numbers, Customer service records, Dates of birth, Driver's licenses and 7 more
Canadian Tire
38,306,562 records exposed — Dates of birth, Email addresses, Genders, Names and 4 more
CarGurus
12,461,887 records exposed — Email addresses, IP addresses, Names, Phone numbers and 1 more
View incident → Indexed 4 months, 2 weeks ago
CarMax
431,371 records exposed — Email addresses, Names, Phone numbers, Physical addresses
View incident → Indexed 4 months, 3 weeks ago
Figure
967,178 records exposed — Dates of birth, Email addresses, Names, Phone numbers and 1 more
View incident → Indexed 4 months, 3 weeks ago
Canada Goose
581,877 records exposed — Device information, Email addresses, IP addresses, Names and 4 more
View incident → Indexed 4 months, 3 weeks ago
University of Pennsylvania
623,750 records exposed — Charitable donations, Dates of birth, Email addresses, Genders and 7 more
View incident → Indexed 4 months, 3 weeks ago
APOIA.se
450,764 records exposed — Email addresses, Names, Physical addresses
View incident → Indexed 4 months, 3 weeks ago
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
5,600 records exposed — Dates of birth, Email addresses, Names, Places of birth and 1 more
View incident → Indexed 5 months ago