CVE-2023-23407: Sensitive Data Storage in Improperly Locked Memory

Windows Point-to-Point Protocol over Ethernet PPPoE Remote Code Execution Vulnerability...

CVE-2023-23393: Sensitive Data Storage in Improperly Locked Memory

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability...

Devolutions Remote Desktop Manager 安全漏洞

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager versions 2022.3.29 to 2022.3.30, which stems from when it switches to offline mode, the forced...

PT-2023-12937 · Publify · Publify

Name of the Vulnerable Software and Affected Versions: publify/publify versions prior to 9.2.10 Description: The issue concerns insecure storage of sensitive information in the GitHub repository publify/publify. Recommendations: For versions prior to 9.2.10, update to version 9.2.10 or later to...

CVE-2023-21771: Sensitive Data Storage in Improperly Locked Memory

Windows Local Session Manager LSM Elevation of Privilege Vulnerability...

CVE-2023-21548: Sensitive Data Storage in Improperly Locked Memory

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-21535: Sensitive Data Storage in Improperly Locked Memory

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-21546: Sensitive Data Storage in Improperly Locked Memory

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

Design/Logic Flaw

A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected products utilize a weak encryption algorithm for storage of sensitive data, which may allow an attacker to more easily obtain credentials used for access...

CVE-2019-12763

The Security Camera CZ application through 1.6.8 for Android stores potentially sensitive recorded video in external data storage, which is readable by any application...

Mindoktor: Storing sensitive information on cookie post-registration

Hello, I've noticed that upon registering the server sets a cookie named clinicclinic.PENTESTFLASH. In it, it stores all the information the user used to register. Sample request: POST /user/register HTTP/1.1 Host: clinic.pentest.mindoktor.io User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.1...

CVE-2005-1648

Gurgens GASoft Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...