OpenClaw Loopback CDP probe can leak Gateway token to local listener

Summary A local process can capture the OpenClaw Gateway auth token from Chrome CDP probe traffic on loopback. Details Affected versions inject x-openclaw-relay-token for loopback CDP URLs, and CDP reachability probes send that header to /json/version. If an attacker controls the probed loopback...

CVE-2018-25130

Beward Intercom 2.3.1 contains a local credential-disclosure vulnerability: usernames and passwords stored in plaintext in BEWARD.INTERCOM.FDB can be read by a local attacker, enabling unauthorized access to IP cameras and door stations. Root cause: credentials stored in an unencrypted database f...

CVE-2025-26437

In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Avast Anti-Virus Local Credential Disclosure

Exploit Title: Avast Anti-Virus Local Credentials Disclosure 19.1.2360 Date: 01/18/2019 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Version: before 19.1.2360 build 19.1.4142.0 Tested on: Windows 10 x64 CVE: CVE-2018-12572 Based on LiquidWorm's and Yakir Wizman's proof of concepts...

FrontRange Desktop & Server Management (DSM) Profile Store Local Encryption Credentials Disclosure Vulnerability

FrontRange Desktop & Server Management is a desktop and service management application. FrontRange Desktop & Server Management insecurely stores encrypted passwords in the NiCfgLcl.ncp and NiCfgSrv.ncp configuration files, allowing a local attacker to exploit vulnerabilities to obtain sensitive...

Webroot Spy Sweeper Enterprise Information Disclosure Vulnerability

Webroot Spy Sweeper is a suite of anti-spyware software from the US company Webroot. Spy Sweeper Enterprise is an enterprise version of Spy Sweeper, which provides real-time, comprehensive protection against spyware for browsing the Web, reading e-mail, downloading and installing software, and...