Damn-Vulnerable-Bank

Damn Vulnerable Bank Guide: https://rewanthtammana.com/damn-vulnerable-bank/ About application Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here. Upcoming Sessions NoNameCon...

CVE-2022-35513

blink1-pass-decrypt ⭐ poc and simple script designed for reversing the ciphertext found at /blink/input of the api server in blink1control2 installations versions =2.2.7. the exploit - CVE-2022-35513 ❗ the blink1control2 app utilises weak password encryption and an insecure method of storage whic...

CVE-2026-87951

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87951 SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87951

The Drupal SAML SSO - Service Provider module (versions 0.0.0 through 3.2.0 ) is vulnerable to an Insecure Storage of Sensitive Information issue (CWE-922 ). The module fails to adequately protect sensitive authentication information, potentially allowing users with access to configuration or und...

CVE-2026-87951 SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

EUVD-2026-107850

Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2022-1257

CVE-2022-1257 PoC: McAfee Agent Database Credential Harvesting Made by scottk817 This script is a PoC for CVE-2022-1257 , a vulnerability in the McAfee Agent Trellix Agent when working with it's database. The vulnerability allows attackers to retrieve and decrypt credentials from the McAfee Agent...

CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data Additional Information: FlatPress CMS version 1.3.1 insecurely stores authentication-related data, including usernames and hashed passwords, directly in client-side cookies. This practice...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82153

The Dell OS Recovery Tool (versions prior to 2.4.4 ) is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). A low privileged attacker with physical access could exploit this flaw to cause Information Disclosure . Remediation is available via security update DSA-2026-...

EUVD-2026-101607

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-89075

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

EUVD-2026-101157

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

PT-2026-114327

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer contains an issue regarding the insecure storage of sensitive information. Recommendations Update to version...

CVE-2026-89075: Insecure Storage of Sensitive Information

Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

CVE-2026-109426

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...

CVE-2026-109426

Telegram-Stremio versions through 5.1.0 are vulnerable to an insecure storage flaw. The application fails to properly encrypt authenticated Telegram session strings, instead using a keyless, reversible encoding transform. Attackers who gain access to the MongoDB database , backups , or logs can u...

CVE-2026-109426 Telegram-Stremio 5.1.0 Insecure Session Storage via encode_string

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...