CVE-2024-41290

CVE-2024-41290 发现 FlatPress CMS v1.3.1 1.3 使用不安全的方法存储认证数据 附加信息： FlatPress CMS 1.3.1 版本将包括用户名和密码哈希在内的认证相关数据不安全地直接存储在客户端 Cookie 中。这种做法使敏感信息面临攻击者未经授权访问和篡改的风险。 产品厂商： 在 Cookie 中不安全地存储认证数据 受影响产品代码库： FlatPress CMS version 1.3.1 - 1.3 受影响组件： Cookie 影响： 用户名和密码哈希暴露在客户端 Cookie 中，可能被未经授权方访问或修改。 如果攻击者获得这些...

CVE-2022-1257

CVE-2022-1257 PoC：McAfee Agent 数据库凭据窃取 作者：scottk817 此脚本是 CVE-2022-1257 的概念验证（PoC），该漏洞存在于 McAfee Agent（Trellix Agent）操作其数据库时。该漏洞允许攻击者从 McAfee Agent 数据库文件（ma.db）中检索并解密凭据，原因是加密密钥处理不当。 免责声明 本脚本仅供教育目的使用。请勿在未拥有或未经明确授权的系统上使用 。未经授权访问系统和数据是非法且不道德的。 描述 CVE-2022-1257 由 NIST 描述如下： MA for Linux、macOS 和 Window...

Damn-Vulnerable-Bank

Damn Vulnerable Bank ガイド: https://rewanthtammana.com/damn-vulnerable-bank/ アプリケーションについて Damn Vulnerable Bank は、意図的に脆弱性を持たせたAndroidアプリケーションとして設計されています。詳細はすべてガイドこちらに文書化されています。 今後のセッション NoNameCon https://cfp.nonamecon.org/nnc2021/talk/WCKLTN/ Black Hat Europe 未定 機能 サインアップ ログイン マイプロフィール画面 パスワード変更...

CVE-2022-35513

blink1-pass-decrypt ⭐ 用于对 API 服务器 /blink/input 处发现的密文进行解密的 PoC 和简单脚本， 适用于 blink1control2 安装（版本 =2.2.7）。 漏洞利用 - CVE-2022-35513 ❗ blink1control2 应用使用弱密码加密和不安全的存储方式，可通过访问 API 服务器的 /blink1/input url 发现。 其中列出了 Skype 登录和电子邮件的密码密文，并且可以被解密。 先决条件 ✔ node node argparse 模块 node simplecrypt 模块 sudo apt instal...

CVE-2026-77875: Insecure Storage of Sensitive Information

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2026-77875 Hide Photos - Secure vault 4.1.0 - Insecure storage of vault media and wallet records in shared external storage

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2026-77875 Hide Photos - Secure vault 4.1.0 - Insecure storage of vault media and wallet records in shared external storage

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2026-77875

Hide Photos – Secure vault (version 4.1.0 ) stores vault media and wallet records in shared external storage , where the data is not bound to the application's calculator-style passcode authentication boundary. A local actor with access to shared external storage—such as through an authorized non...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to insecure storage of sensitive information (CVE-2023-29261)

Summary IBM Sterling Secure Proxy could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations and the CVE is addressed in version 6.2.2.0 Vulnerability Details CVEID:CVE-2023-29261 DESCRIPTION: IBM Sterli...

PT-2026-92168

Name of the Vulnerable Software and Affected Versions BharatMLStack versions prior to 1.3.1 Description Trufflebox UI stores the JWT authentication token, full user object, and session ID in the browser's localStorage. This storage mechanism allows any JavaScript running on the page to access the...

CVE-2021-38489

HDD password plaintext is stored in a UEFI variable...

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

CVE-2026-44629: Insecure Storage of Sensitive Information

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the fact that information is stored in an open manner, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

PYSEC-2026-3792

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

EUVD-2026-67039

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

CVE-2026-81683

CVE-2026-81683 affects the openssl_encrypt Python package (pip name openssl-encrypt) versions 1.4.8 and earlier . The vulnerability is in the desktop GUI's Settings screen, where a "combined certificate and private key" PEM field stores an mTLS client private key in cleartext within a world-reada...

CVE-2026-75918

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the tracking file at content/core/data/trackingDDMMYYYY to extract reset tokens and replay them against the password reset API to take over...

CVE-2025-59320: Insecure Storage of Sensitive Information

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors. An unauthenticated attacker with physical access to the system disk can recover this information and craft an environment to unseal the TPM...

CVE-2026-20705

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...