EUVD-2026-69466

A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve sensitive information that was expected to remain protected...

CVE-2026-73739

CVE-2026-73739 is an authenticated sensitive information disclosure in the API of HPE Networking Fabric Composer . Sensitive data that was expected to remain protected is exposed in cleartext format , allowing an attacker with administrative privileges and local access to retrieve it. The CVSS 3....

CVE-2026-83551

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

EUVD-2026-69418

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-83551 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-83551 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-83551

Amazon SageMaker Python SDK versions prior to v3.11.0 and v2.256.0 store the HMAC signing key in cleartext within the @step and @remote decorator pipeline component. This allows an authenticated remote user to extract the key from SageMaker DescribePipeline API responses and forge valid integrity...

sickrageWTF

SickRage 明文 GitHub 凭据漏洞 CVE-2018-9160 1. 关于 漏洞标题：SickRage 在 HTTP 响应中返回明文凭据 日期：2018-04-01 漏洞作者：Sven Fassbender 联系方式：https://twitter.com/mezdanak 厂商主页：https://sickrage.github.io 软件链接：https://github.com/SickRage/SickRage 版本： ... input type="text"...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320：Abacre Restaurant Point of Sale POS 中的内存敏感信息明文存储漏洞。 所有版本（最高至 15.0.0.1656）的 Abacre Restaurant Point of Sale POS 均存在内存中敏感信息明文存储漏洞。在激活尝试期间，应用程序会将有效的、绑定设备的许可证密钥保留在进程内存中。攻击者可通过将进程附加到调试器并分析进程/内存转储来获取这些密钥，然后无需购买即可在同一台机器上激活软件。 下面，我们提供了动态分析和调试器输出的证据，表明这些密钥在激活尝试期间被分配并保留在进程内存中。...

CVE-2023-5359

CVE-2023-5359 - Vulnerabilidad de almacenamiento en texto claro en W3 Total Cache Descripción CVE-2023-5359 es una vulnerabilidad de almacenamiento en texto claro que afecta al plugin de WordPress W3 Total Cache en versiones ≤ 2.7.5. Esta vulnerabilidad permite a atacantes remotos acceder a...

CVE-2024-24488

CVE-2024-24488 深圳腾达科技 CP3V2.0 V11.10.00.2311090948 中存在一个问题，允许本地攻击者通过密码组件获取敏感信息。 已测试版本 CP3V2.0 - V11.10.00.2311090948 CWE CWE-313：明文存储在文件或磁盘上 漏洞概述 受此漏洞影响的设备可以通过特定文件路径访问其所连接的 WiFi 路由器的密码。所述路径包含一个文件，其中以明文形式存储了包括 WiFi 路由器密码在内的敏感信息。 受影响文件路径 敏感信息可在以下位置找到： /app/userdata/ifcfg.wlan0...

CVE-2026-77975 Ebyte NA111-M Cleartext Storage of Sensitive Information

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...

CVE-2026-77975

Ebyte NE2-D11 (also affecting the NA111-M model) contains a cleartext storage of sensitive information vulnerability. The device exports administrative credentials and other sensitive configuration data without adequate protection. An unauthenticated attacker on the adjacent network who obtains a...

CVE-2026-82699

A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive...

CVE-2026-82699

A cleartext storage vulnerability exists in the Password Handler component of sambitraj Student Management System (rolling release, up to commit 56ba287f). The flaw resides in the file aca.sql , where manipulation of the Password argument can result in sensitive information being stored in plaint...

EUVD-2026-68520

A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive...

POC-CVE-2022-26671

Si has llegado hasta aquí, sabes por qué era necesario crear este repositorio. CVE-2022-26671 GET /AT/ATDefault.aspx La línea 430 contiene la credencial en texto claro. secom | supervisor En cuanto a la divulgación responsable, no revelar una credencial en texto claro en el cuerpo de una respuest...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 store configured LLM API keys in cleartext on disk without encryption or access restrictions. The keys are written to predictably-named JSON files in a temporary settings directory, allowing any process or user with local read access to recover prov...

CVE-2026-82640 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...