CVE-2023-5359

CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ≤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache Targets versions ≤2.7.5 vulnerable to CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...

CVE-2018-16987

CVE-2018-16987 This is a cleartext storage of sensitive information & sensitive information exposure vulnerability I found in Squash TM during a penetration test. SquashTM Squash TM is a web interface used to manage test cases. Link to the project Description Squash TM through at least 1.18.0...

CVE-2026-71455

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20...

EUVD-2026-109979

Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20...

CVE-2026-71455

The Johnson Controls Kantech Entrapass software, versions before 9.20 , is vulnerable to a cleartext storage of sensitive information in memory (CWE-316). This vulnerability allows an attacker with high privileges and active user interaction to Retrieve Embedded Sensitive Data . The vulnerability...

CVE-2026-77054

The boneIO Black software is vulnerable to cleartext storage of sensitive information, specifically MQTT broker and web panel passwords. The GET /api/config endpoint exposes these passwords in cleartext to any authenticated user. Furthermore, because authentication is disabled by default (CVE-202...

CVE-2026-77054 Cleartext Storage of Sensitive Information in boneIO

boneIO Black stores passwords, including the MQTT broker and web panel passwords, in cleartext. The GET /api/config endpoint returns the full configuration with sub-services passwords exposed. Any authenticated user can call the endpoint and access the administrative passwords in cleartext form...

CVE-2024-24488

CVE-2024-24488 An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. Tested Versions CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Cleartext Storage in a File or on Disk Vulnerability Overview Devices...

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

CVE-2026-112250

The BRAIN2 software (versions up to and including 3.09 ) contains a vulnerability where a Windows service account password may be written in cleartext to a setup log file. This occurs during the installation wizard when Microsoft SQL Server access is configured using Integrated Security and a spe...

CVE-2026-112250 Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Cleartext Storage of Sensitive Information in Memory in Abacre Restaurant Point of Sale POS. All versions of Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid...

CVE-2026-115400

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromis...

EUVD-2026-108165

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromis...

CVE-2026-115400

Versions of crawlseo prior to 0.2.5 are vulnerable to a cleartext storage flaw (CWE-312). The application stores Google OAuth access and refresh tokens unencrypted within the User.googleTokens column of a Postgres database . An attacker with database read access can extract these plaintext long-l...

CVE-2026-115400 crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromis...

CVE-2026-115400 crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens from a compromis...

CVE-2026-96293

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file lef...

EUVD-2026-108073

A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to obtain a managed computer's FileVault Personal Recovery Key by reading a persistently written diagnostic log file lef...