Insertion of Sensitive Information Into Sent Data

Every one of the 501 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Atarim < 4.2.2 - Sensitive Information ExposureCVE-2025-60188Vito Peleg · CVSS 7.5 · 3.7% likely

   Vito Peleg

2. Seriously Simple Podcasting < 3.0.0 - Information DisclosureCVE-2023-6444Castos · CVSS 5.3 · 2.5% likely

   Castos

3. AnythingLLM - Information DisclosureCVE-2026-24477Mintplex-Labs · CVSS 8.7 · 2.1% likely

   Mintplex-Labs

4. Simply Static - Information DisclosureCVE-2024-32825Simply Static · CVSS 7.5 · 2.0% likely
5. Lightdash v0.1024.6 - Server-Side Request ForgeryCVE-2024-6586Lightdash · CVSS 7.3 · 1.9% likely

   Lightdash

6. FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosureCVE-2026-47717frangoteam · CVSS 7.5 · 1.4% likely

   Frangoteam

7. AI ChatBot with ChatGPT by AYS <= 2.6.6 - Unauthenticated API Key ExposureCVE-2025-62039Ays Pro · CVSS 7.5 · 1.3% likely

   Ays Pro

8. Discourse < 2026.1.2/2026.2.1/2026.3.0-latest.1 - Unauthenticated Private User Action DisclosureCVE-2026-27934discourse · CVSS 8.7 · 1.2% likely

   Discourse

9. Contest Gallery - Broken Access ControlCVE-2024-43283Wasiliy Strecker / ContestGallery developer · CVSS 5.3 · 1.1% likely

   Wasiliy Strecker / ContestGallery developer

10. 12 Step Meeting List < 3.16.6 - Unauthenticated Sensitive Information ExposureCVE-2025-24582AA Web Servant · CVSS 5.3 · 1.0% likely

    AA Web Servant

11. WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information ExposureCVE-2025-58226iberezansky · CVSS 5.3 · 0.7% likely

    Iberezansky

12. WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information ExposureCVE-2025-62126Razvan Stanga · CVSS 5.3 · 0.7% likely
13. WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status DisclosureCVE-2025-59136Efí Bank · CVSS 5.3 · 0.7% likely
14. libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie…CVE-2022-27779Siemens · 2.8% likely

    Siemens2 bounty reports

15. Request is an http client. If a request is made using ```multipart```, and the body type is a ```number```, then the specified number of non-zero memory is passed in the body. Thi…CVE-2017-16026HackerOne · 2.5% likely

    HackerOne

16. It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special strings for obtaining attribute values with system property. T…CVE-2017-2582Red Hat · CVSS 6.5 · 2.4% likely

    Red Hat

17. Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCVE-2020-26085Cisco · CVSS 9.9 · 2.3% likely

    Cisco

18. A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame. The ping functionality by defau…CVE-2016-10518HackerOne · 1.9% likely

    HackerOne

19. Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestCVE-2013-1840Red Hat · CVSS 6.5 · 1.7% likely

    Red Hat

20. Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCVE-2020-27134Cisco · CVSS 9.9 · 1.7% likely

    Cisco

21. A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory.CVE-2016-10519HackerOne · 1.6% likely

    HackerOne

22. The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.…CVE-2020-25703Moodle · 1.5% likely

    Moodle

23. Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...CVE-2025-58098Apache Software Foundation · CVSS 8.3 · 1.5% likely

    Apache

24. Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests extern…CVE-2018-17245Elastic · 1.5% likely

    Elastic

25. Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to exec…CVE-2021-26566Synology · CVSS 8.3 · 1.5% likely

    Synology

26. Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesCVE-2020-27132Cisco · CVSS 9.9 · 1.4% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.