CVE-2013-3593

Baramundi Management Suite 7.5 through 8.9 uses cleartext for 1 client-server communication and 2 data storage, which allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file...

CVE-2018-11544

The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the /data/data/com.theolivetree.ftpserver/sharedprefs/com.theolivetree.ftpserverpreferences.xml file as the prefUsername and prefUserpass strings...

ABB多款产品 安全漏洞

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda RX2 Pro allows a hacker to disclose protected information.

The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda RX2 Pro is related to the insecure storage of confidential information. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

CVE-2025-30394

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

I-O Data HDL-T 操作系统命令注入漏洞

I-O Data HDL-T is a series of network hard disks from I-O Data Japan. An operating system command injection vulnerability exists in I-O Data HDL-T versions 1.21 and earlier, which stems from OS command injection and could lead to the execution of arbitrary OS commands...

CVE-2025-30394

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

PT-2025-21000 · Microsoft · Remote Desktop Gateway Service +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an unauthorized attacker to deny service over a network. This can affect the system,...

Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

Exploit for CVE-2025-51052

Vulnerabilities Discoverers & Exploit Authors Davide Reggiani...

ABB Automation Builder 安全漏洞

ABB Automation Builder is an integrated engineering development environment from ABB Switzerland for unified programming and configuration of ABB programmable logic controllers PLCs, motion control and robotics systems. A security vulnerability exists in ABB Automation Builder version 2.8.0 and...

CVE-2025-27732

Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2025-27484

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...

CVE-2025-27482

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-26665

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally...

CVE-2025-27484

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over a network...

CVE-2025-27482

Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...