GHSA-27V7-QHFV-RQQ8 Insecure Credential Storage in web3

All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...

Insecure Credential Storage in web3

All versions of web3 are vulnerable to Insecure Credential Storage. The package stores encrypted wallets in local storage and requires a password to load the wallet. Once the wallet is loaded, the private key is accessible via LocalStorage. Exploiting this vulnerability likely requires a Cross-Si...

Schneider Electric AVEVA Vijeo Citect and Schneider Electric AVEVA CitectSCADA Insecure Credential Storage Vulnerability

Schneider Electric AVEVA Vijeo Citect and Schneider Electric AVEVA CitectSCADA are both data acquisition and monitoring system SCADA software packages from Schneider Electric, France. A security vulnerability exists in Schneider Electric AVEVA Vijeo Citect and Schneider Electric AVEVA CitectSCADA...

CVE-2018-16223

Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamerapreferences.xml in the QBee Cam application through 1.0.5 for Android allows an attacker to retrieve the username and password...

Sauter moduWeb Vision Certificate Insecure Storage Vulnerability

Sauter moduWeb Vision is an embedded web-based SCADA system for HVAC. Sauter modoWeb Vision uses an insecure method of storing credentials, allowing remote attackers to bypass authentication by exploiting this vulnerability...

Inductive Automation Ignition Multiple Vulnerabilities

Binary data scadainductiveautomationignitionICSA-15-090-01.nbin...

[Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage

February 28, 2005 Hat-Squad Advisory: GFI L.N.S.S 5.0- Insecure Credential Storage Product: GFI Languard Network Security Scanner Vendor Url: http://gfi.com/ Version: 5.0 Vulnerability: Insecure Credential Storage Release Date: February 28, 2005 Vendor Status: Informed on 22 February 2005 Respons...