CVE-2026-30916

...

EUVD-2026-10424

Shescape is a simple shell escape library for JavaScript. Prior to 2.1.9, an attacker may be able to bypass escaping for the shell being used. This can result, for example, in exposure of sensitive information. This impacts users of Shescape that configure their shell to point to a file on disk...

CVE-2026-30916

CVE-2026-30916 relates to the Shescape JavaScript library. Prior to version 2.1.9, an attacker could bypass shell escaping when the configured shell pointed to a file that is a chain of symlinks, potentially exposing sensitive information depending on the shell used. A fix is available in 2.1.9. ...

PYSEC-2026-84

An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information...

CVE-2025-70040

An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2. This allows an attacker to obtain sensitive information...

CVE-2025-70048

An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...

EUVD-2025-208370

An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including password hashes and certificates...

Nexus Wallet Interface 安全漏洞

Nexus Wallet Interface is an open-source cryptocurrency wallet interface developed by Nexus. Version 3.2.0-beta.2 of Nexus Wallet Interface contains a security vulnerability, which stems from the transmission of sensitive information in plain text...

CVE-2025-70050

An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information...

CVE-2025-70040

An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2. This allows an attacker to obtain sensitive information...

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Microsoft ACI Confidential Containers is a Microsoft credentials container. A security vulnerability exists in Microsoft ACI Confidential Containers that stems from an improper design and can be exploited by an attacker to obtain sensitive information...

CVE-2025-70040

CVE-2025-70040 affects the npm package jimeng-web-mcp (v2.1.2) from LupinLin1. The issue is described as CWE-532: Insertion of Sensitive Information into Log File, allowing an attacker to obtain sensitive information via poorly sanitized log output. Connected sources confirm the affected componen...

LessPass 安全漏洞

LessPass is an open-source password manager developed by LessPass. Version 9.6.9 of LessPass contains a security vulnerability that stems from the storage of sensitive information in plaintext, which could allow attackers to obtain this sensitive data...

CVE-2025-70050

CVE-2025-70050 affects lesspass v9.6.9 and is described as CWE-312: Cleartext Storage of Sensitive Information. The provided documents indicate that the vulnerability allows attackers to obtain sensitive information, with a CVSS‑3.1 base score of 6.5 (Network attack, Low attack complexity, No pri...

Lockbox -- a Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads

Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and...

PT-2026-24086

An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive information and execute arbitrary code...

CVE-2025-70048

Nexusoft NexusInterface v3.2.0-beta.2 is described as affected by CWE-319: Cleartext Transmission of Sensitive Information. The Connected documents reiterate this issue but do not provide technical details, root cause, impact specifics, exploit information, or remediation steps.

JiMeng Web MCP Server 安全漏洞

JiMeng Web MCP Server is a large model context server developed by LupinLin1. Version 2.1.2 of JiMeng Web MCP Server contains a security vulnerability. This vulnerability stems from the insertion of sensitive information into log files, which may allow attackers to obtain sensitive data...

CVE-2025-70048

An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2...

IBM InfoSphere Information Server Log Information Disclosure Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A log information disclosure vulnerability exists in IBM InfoSphere Information Server that...