Lucene search
K

123 matches found

GithubExploit
GithubExploit
added 2026/05/15 4:0 p.m.93 views

hdd-toolkit

HDD Firmware Toolkit A comprehensive Python toolkit for dumpi...

8.8CVSS5.9AI score0.09141EPSS
Exploits2
NVD
NVD
added 2026/04/30 8:16 p.m.6 views

CVE-2026-33448

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets...

4.8CVSS0.001EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/30 7:47 p.m.3 views

CVE-2026-33448

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets...

4.8CVSS5.3AI score0.001EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/30 7:47 p.m.31 views

CVE-2026-33448 Format string vulnerability in MacOS clients prior to 14.50

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets...

4.8CVSS0.001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/02/11 7:30 a.m.4 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS5.5AI score0.00094EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 4:16 a.m.7 views

CVE-2026-24319

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS0.00094EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.8 views

PT-2026-7218

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...

5.8CVSS5.5AI score0.00094EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.5 views

SAP Business One 安全漏洞

SAP Business One is a business management software developed by the German company SAP. This software includes functions such as financial management, operational management, and human resource management. There is a security vulnerability in SAP Business One, which stems from sensitive informati...

5.8CVSS5.8AI score0.00094EPSS
Exploits0References3
NCSC
NCSC
added 2026/01/13 7:17 p.m.6 views

Vulnerability fixed in Microsoft SQL Server

Microsoft has fixed a vulnerability in SQL Server A malicious party can exploit the vulnerability to gain unauthorized access to DEBUG functionality and thereby generate, among other things, memory dumps. These dumps can also involve memory outside the scope of SQL Server, allowing the malicious...

7.2CVSS7.4AI score0.01242EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.4 views

PT-2025-52456

Name of the Vulnerable Software and Affected Versions Turms Server versions prior to 0.10.0-SNAPSHOT Description The software stores administrator passwords in plaintext within memory, specifically in the rawPassword field of AdminInfo objects, to improve authentication speed. This bypasses the...

6CVSS6.5AI score0.00194EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/12/19 12:0 a.m.6 views

CVE-2025-66910

Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login,...

6.5AI score0.00194EPSS
Exploits1References4
EUVD
EUVD
added 2025/12/19 12:0 a.m.3 views

EUVD-2025-204537

Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authentication system. The BaseAdminService class caches administrator passwords in plaintext within AdminInfo objects to optimize authentication performance. Upon successful login,...

6CVSS6.4AI score0.00194EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/12/11 5:3 a.m.14 views

CVE-2025-65832

The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi credentials sent during the pairing process, JWTs used for authentication, and other sensitive details can be retrieved. ...

4.6CVSS6.2AI score0.00122EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/20 3:30 p.m.4 views

EUVD-2025-198271

@perfood/couch-auth may expose session tokens, passwords...

6.5CVSS6.4AI score0.00182EPSS
Exploits0References4
OSV
OSV
added 2025/11/20 3:30 p.m.3 views

GHSA-62VX-HPCR-M9CH @perfood/couch-auth may expose session tokens, passwords

Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access...

8.7CVSS6.7AI score0.00182EPSS
Exploits0References4
NVD
NVD
added 2025/11/20 3:17 p.m.2 views

CVE-2025-60794

Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access...

6.5CVSS0.00182EPSS
Exploits0References3
OSV
OSV
added 2025/11/20 3:17 p.m.4 views

CVE-2025-60794

Session tokens and passwords in couch-auth 0.21.2 are stored in JavaScript objects and remain in memory without explicit clearing in src/user.ts lines 700-707. This creates a window of opportunity for sensitive data extraction through memory dumps, debugging tools, or other memory access...

6.5CVSS6.7AI score0.00182EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/20 12:0 a.m.6 views

PT-2025-47578

Name of the Vulnerable Software and Affected Versions couch-auth version 0.21.2 Description Session tokens and passwords are stored in JavaScript objects within the software and are not explicitly cleared from memory. This occurs in src/user.ts lines 700-707, creating a potential for sensitive da...

6.5CVSS6.4AI score0.00182EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-5008

Malware in sbrugna...

4CVSS4.7AI score0.00304EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-10316

Malware in sbrugna...

6CVSS5.2AI score0.00108EPSS
Exploits0References2
Rows per page
Query Builder