Skip to main content
COSMICBYTEZLABS
NewsSecurityHOWTOsToolsTraining
StudyProjectsNewsletterHire MeAbout
Subscribe

Press Enter to search or Esc to close

News
Security
HOWTOs
Tools
Training
Study
Projects
Newsletter
Hire Me
About
RSS Feed
Reading List
Subscribe

Stay in the Loop

Get the latest security alerts, tutorials, and tech insights delivered to your inbox.

Subscribe NowFree forever. No spam.
COSMICBYTEZLABS

Your trusted source for IT intelligence, cybersecurity insights, and hands-on technical guides.

2618+ Articles
162+ Guides

CONTENT

  • Latest News
  • Security Alerts
  • HOWTOs
  • Checklists
  • Projects
  • Exam Prep

RESOURCES

  • Search
  • Browse Tags
  • Newsletter Archive
  • Reading List
  • RSS Feed

COMPANY

  • About Us
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 CosmicBytez Labs. All rights reserved.

System Status: Operational
All tags
11 articles

#Information Disclosure

All CosmicBytez Labs articles tagged #Information Disclosure, across news, security advisories, how-to guides, and projects.

  • SecurityAug 23, 2026

    CVE-2026-78122: docker-socket-proxy Fails to Gate Container Read Endpoints

    docker-socket-proxy's CONTAINERS guard bypassed via GET requests to /archive, /export, /logs, and /top, exposing arbitrary file reads.

  • SecurityAug 18, 2026

    CVE-2026-74799: SiYuan pprof Debug Endpoints Exposed Without Authentication

    SiYuan before 3.7.4 exposes Go pprof debug endpoints unauthenticated, leaking in-memory secrets including API keys and auth codes.

  • SecurityJul 26, 2026

    CVE-2026-57989: Microsoft Edge Origin Validation Error Allows Remote Information Disclosure

    A high-severity origin validation error in Microsoft Edge (Chromium-based) enables an unauthenticated remote attacker to disclose sensitive information across origins. Users should update Edge immediately.

  • SecurityJul 26, 2026

    CVE-2026-57990: Microsoft Edge Exposes Local Files and Directories to Remote Attackers

    A high-severity access control flaw in Microsoft Edge (Chromium-based) allows unauthenticated remote attackers to access files or directories that should be protected. Update to the latest Edge version immediately.

  • SecurityJun 4, 2026

    CVE-2026-49191: M3WebServer Hard-Coded API Keys Exposed via Error Pages

    A critical CVSS 9.8 vulnerability in M3WebServer hard-codes backend API keys in the production build. Attackers intercept them through verbose error handling…

  • SecurityMay 19, 2026

    CVE-2026-39079: PrestaShop UPS Shipping Module Sensitive

    CVE-2026-39079 is a CVSS 7.5 (High) information disclosure vulnerability in the PrestaShop upsshipping module affecting all versions through 2.4.0. Remote...

  • SecurityMay 13, 2026

    CVE-2026-8043: Ivanti Xtraction File Control & HTML

    A critical vulnerability in Ivanti Xtraction before version 2026.2 allows remote authenticated attackers to read sensitive files and write arbitrary HTML...

  • SecurityMar 30, 2026

    CVE-2026-5128: Steam Trader 2.1.1 Unauthenticated Sensitive

    A CVSS 10.0 critical vulnerability in steam-trader 2.1.1 exposes Steam account credentials, identity secrets, and shared secrets to unauthenticated remote...

  • SecurityMar 27, 2026

    CVE-2026-33669: SiYuan Unauthenticated Document Content

    A critical unauthenticated information disclosure vulnerability in SiYuan, the personal knowledge management system, allows remote attackers to retrieve...

  • SecurityMar 16, 2026

    CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username

    ZKTeco ZKBioSecurity 3.0 allows unauthenticated attackers to enumerate valid usernames by submitting partial character strings to the...

  • SecurityMar 16, 2026

    CVE-2025-47813: Wing FTP Server Path Disclosure Enables RCE

    CISA has added CVE-2025-47813, a medium-severity information disclosure flaw in Wing FTP Server, to its KEV catalog after confirming active exploitation...