CVE-2025-0432

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

CVE-2025-0432 HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

CVE-2025-0432

EWON Flexy 202 exposes credentials by transmitting them in clear text via the device web page when a user is added or credentials are changed. Root cause: lack of encryption/cleartext transmission. Impact: confidentiality of credentials is HIGH. Several sources corroborate the issue; however, no ...

CVE-2025-0432 HMS Networks Ewon Flexy 202 Cleartext Transmission of Sensitive Information

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage...

Rockwell Automation PowerFlex 755 安全漏洞

The Rockwell Automation PowerFlex 755 is an AC inverter from Rockwell Automation. A security vulnerability exists in the Rockwell Automation PowerFlex 755 that originates from sending credentials in clear text...

PT-2025-3886 · Hms Industrial Networks · Ewon Flexy 202

Name of the Vulnerable Software and Affected Versions: EWON Flexy 202 affected versions not specified Description: The issue concerns the transmission of user credentials in clear text without encryption when a user is added or user credentials are changed via the device's webpage. This affects t...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS at the /admin/compass endpoint, which passes data from GET requests to the index function. This function can return unsanitized text in error message popups when it receives a file deletion request. As a result,...

Advisory ROSA-SA-2025-2590

software: vim 9.1.0754 WASP: ROSA-CHROME packageevrstring: vim-9.1.0754-1 CVE-ID: CVE-2024-41957 BDU-ID: 2024-06478 CVE-Crit: LOW CVE-DESC.: A vulnerability in the tagstackclearentry function of the src/alloc.c file of the vim text editor exists due to a bug in the use of pointers after memory...

Advisory ROSA-SA-2025-2586

software: nano 8.2 OS: ROSA-CHROME packageevrstring: nano-8.2-3 CVE-ID: CVE-2024-5742 BDU-ID: 2024-06879 CVE-Crit: LOW CVE-DESC.: A vulnerability in the Nano text editor is related to temporary file handling errors. Exploitation of the vulnerability could allow an attacker to impact data integrit...

CVE-2023-50945

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user...

CVE-2023-50945 IBM Common Licensing information disclosure

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user...

CVE-2023-50945

IBM Security Bulletin (4CD2A2FD82F36F35C228C749EF006B94401908FFBE17D0B20533D071D61360D0) notes that IBM Common Licensing affects Agent 9.0 and ART 9.0, where user passwords could be exposed in the browser console due to stored credentials. The information-disclosure stems from password exposure v...

PT-2025-1553 · Ibm · Ibm Common Licensing

Name of the Vulnerable Software and Affected Versions: IBM Common Licensing version 9.0 Description: The issue is related to the storage of user credentials in plain clear text, which can be read by a local user. This allows an attacker to gain unauthorized access to protected information. The...

CVE-2025-0705

A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text lead...

GHSA-V34R-VJ4R-38J6 Updatecli exposes Maven credentials in console output

Summary Private maven repository credentials leaked in application logs in case of unsuccessful retrieval operation. Details During the execution of an updatecli pipeline which contains a maven source configured with basic auth credentials, the credentials are being leaked in the application...

CVE-2025-24627

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

CVE-2025-24627 WordPress Blur Text Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

CVE-2025-24627

CVE-2025-24627 concerns the WordPress plugin Blur Text. The vulnerability is an authenticated stored XSS vulnerability that affects Blur Text versions n/a through 1.0.0. Wordfence references show a patch status of Patched for Blur Text

CVE-2025-24627 WordPress Blur Text Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

Seasoning email threats with hidden text salting

Cisco Talos observed an increase in the number of email threats leveraging hidden text salting also known as "poisoning" in the second half of 2024. Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely...