CVE-2026-107857

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

CVE-2026-107857

The Mindwtr mobile application (versions prior to 1.1.5 ) suffers from a vulnerability where the Cloud sync bearer token and WebDAV password are stored in plaintext within unencrypted AsyncStorage . Specifically, these credentials are stored under the keys @mindwtr_cloud_token and @mindwtr_webdav...

CVE-2026-107857 Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

EUVD-2022-4760

Malicious code in bioql PyPI...

PT-2013-3417

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.10 and earlier, 2.2.x through 2.2.7, 2.3.x through 2.3.4, 2.4.x through 2.4.1 Description The issue allows remote authenticated administrators to obtain sensitive information by configuring an instance, due to the inclusion...