CVE-2023-39144

CVE-2023-39144 الخلفية اكتشفت هذه الثغرة الأمنية في مايو 2023. تقوم شركة Element55 بتطوير برمجيات لمكاتب المحاماة لتتبع الوقت. يسحب هذا البرنامج المعلومات من مواقع مختلفة، مثل Exchange وSQL وShoretel. الجدول الزمني 24 مايو 2023 - تم الإبلاغ عن الثغرة إلى Element 55 25 مايو 2023 - أكدت Element55...

CVE-2018-16987

CVE-2018-16987 Это уязвимость хранения конфиденциальной информации в открытом виде и раскрытия конфиденциальной информации, которую я обнаружил в Squash TM во время пентеста. SquashTM Squash TM — это веб-интерфейс для управления тестовыми сценариями. Ссылка на проект Description Squash TM, по...

CVE-2026-15933

OptimiDoc Server (On-Premise) stores credentials for external services in cleartext, allowing an authenticated administrator to view previously configured passwords—SMTP , FTP (scan delivery), Active Directory (user list import), and SharePoint —in cleartext through the web administration panel p...

EUVD-2026-70378

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-15933 Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2025-65320

CVE-2025-65320: मेमोरी में संवेदनशील जानकारी का स्पष्ट पाठ भंडारण Abacre Restaurant Point of Sale POS में। Abacre Restaurant Point of Sale POS के सभी संस्करण 15.0.0.1656 तक मेमोरी में संवेदनशील जानकारी के स्पष्ट पाठ भंडारण के लिए असुरक्षित हैं। एप्लिकेशन सक्रियण प्रयास के दौरान प्रक्रिया मेमोरी म...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

ثغرة تخزين النص الصريح CVE-2023-5359 في W3-Total-Cache يستهدف الإصدارات ≤2.7.5 المعرضة للثغرة CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS = "/wp-content/plugins/w3-total-cache/ExtensionCloudFlarePlugin.php",...

CVE-2026-83551

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

EUVD-2026-69418

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-83551 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-83551

Amazon SageMaker Python SDK versions prior to v3.11.0 and v2.256.0 store the HMAC signing key in cleartext within the @step and @remote decorator pipeline component. This allows an authenticated remote user to extract the key from SageMaker DescribePipeline API responses and forge valid integrity...

CVE-2023-5359

CVE-2023-5359 - ثغرة التخزين غير المشفر في W3 Total Cache الوصف CVE-2023-5359 هي ثغرة تخزين غير مشفر تؤثر على إضافة ووردبريس W3 Total Cache في الإصدارات ≤ 2.7.5. تسمح هذه الثغرة للمهاجمين عن بُعد بالوصول إلى بيانات اعتماد حساسة مخزنة في ملفات PHP غير مشفرة وقابلة للوصول العام. الخطورة درجة CVSS :...

CVE-2024-24488

CVE-2024-24488 Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 में एक समस्या स्थानीय हमलावर को पासवर्ड घटक के माध्यम से संवेदनशील जानकारी प्राप्त करने की अनुमति देती है। परीक्षित संस्करण CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: फ़ाइल या डिस्क पर स्पष्ट पाठ में भंडारण भेद्यता अवलोकन इस...

CVE-2026-77975 Ebyte NA111-M Cleartext Storage of Sensitive Information

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...

CVE-2026-77975

Ebyte NE2-D11 (also affecting the NA111-M model) contains a cleartext storage of sensitive information vulnerability. The device exports administrative credentials and other sensitive configuration data without adequate protection. An unauthenticated attacker on the adjacent network who obtains a...

CVE-2026-82699

A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive...

CVE-2026-82699

A cleartext storage vulnerability exists in the Password Handler component of sambitraj Student Management System (rolling release, up to commit 56ba287f). The flaw resides in the file aca.sql , where manipulation of the Password argument can result in sensitive information being stored in plaint...

EUVD-2026-68520

A flaw has been found in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This impacts an unknown function of the file aca.sql of the component Password Handler. Executing a manipulation of the argument Password can lead to cleartext storage of sensitive...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

CVE-2026-82640

browser-use web-ui versions 2.0.0 through 3.0.0 store configured LLM API keys in cleartext on disk without encryption or access restrictions. The keys are written to predictably-named JSON files in a temporary settings directory, allowing any process or user with local read access to recover prov...