Damn-Vulnerable-Bank

Damn Vulnerable Bank Guide: https://rewanthtammana.com/damn-vulnerable-bank/ About application Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here. Upcoming Sessions NoNameCon...

CVE-2022-1257

CVE-2022-1257 PoC: حصاد بيانات اعتماد قاعدة بيانات McAfee Agent من إعداد scottk817 هذا السكربت هو PoC لثغرة CVE-2022-1257 ، وهي ثغرة في McAfee Agent Trellix Agent عند التعامل مع قاعدة البيانات الخاصة به. تسمح هذه الثغرة للمهاجمين باسترجاع وفك تشفير بيانات الاعتماد من ملف قاعدة بيانات McAfee Agent...

CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 को प्रमाणीकरण डेटा संग्रहीत करने के लिए असुरक्षित तरीकों का उपयोग करते पाया गया Additional Information: FlatPress CMS संस्करण 1.3.1 प्रमाणीकरण-संबंधित डेटा, जिसमें उपयोगकर्ता नाम और हैश किए गए पासवर्ड शामिल हैं, को सीधे क्लाइंट-साइड कुकीज़ में असुरक्षित रूप...

CVE-2021-38489

HDD password plaintext is stored in a UEFI variable...

CVE-2022-35513

blink1-pass-decrypt ⭐ نص برمجي صغير poc مصمم لفك تشفير النص المشفر الموجود في /blink/input لخادم api في تثبيتات blink1control2 الإصدارات =2.2.7. الثغرة - CVE-2022-35513 ❗ يستخدم تطبيق blink1control2 تشفيرًا ضعيفًا لكلمات المرور وطريقة تخزين غير آمنة يمكن العثور عليها عبر الوصول إلى عنوان...

EUVD-2026-67039

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

CVE-2026-81683

CVE-2026-81683 affects the openssl_encrypt Python package (pip name openssl-encrypt) versions 1.4.8 and earlier . The vulnerability is in the desktop GUI's Settings screen, where a "combined certificate and private key" PEM field stores an mTLS client private key in cleartext within a world-reada...

CVE-2026-75918

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled. Unauthenticated attackers can read the tracking file at content/core/data/trackingDDMMYYYY to extract reset tokens and replay them against the password reset API to take over...

CVE-2026-20705

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...

EUVD-2026-56471

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...

CVE-2026-20705

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...

CVE-2026-46513

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hexrandombytes32 strings in ocapitokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stor...

CVE-2026-14867

Credentials of built-in users are insecurely stored in the User directory of PcVue projects, all versions prior to 17.0.0. A local attacker could retrieve users’ credentials. Active Directory accounts are not affected by this vulnerability...

CVE-2026-7257

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file...

CVE-2025-32751

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

CVE-2025-32746

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

CVE-2025-32751

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

CVE-2025-32751

This CVE affects Dell PowerFlex Manager

EUVD-2025-209925

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...

CVE-2025-32751

Dell PowerFlex Manager, versions =4.6.2, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to sensitive information...