CVE-2022-43117

建议描述 发现 Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 存在多个跨站脚本（XSS）漏洞， 涉及 Name、Username、Description 和 Site Feature 参数。 附加信息 概念验证：https://drive.google.com/file/d/1ZmAuKMVzUpL8pt5KXQJk8IyPECoVP9xw/view?usp=sharing...

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Ejecución remota de código mediante deserialización insegura. Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client...

aes256_passwd_store

aes256passwdstore 该脚本能安全地在磁盘上自定义数据库文件中加密或解密密码。它还具备从先前生成的数据库文件中检索密码的功能。该脚本从标准输入/内存获取主密码，使用传递给算法参数/-a（scrypt,...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232...

CVE-2026-84884

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

CVE-2026-84884 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice where the required initialization vector for encryption was always the same,...

CVE-2026-82783

A plaintext password storage flaw affects the CONPROSYS nano Series , a product by Contec. If exploited, an attacker with physical access to the device can obtain stored credentials. The vulnerability requires high attack complexity and no prior privileges (CVSS 4.0: 4.1 MEDIUM ; CVSS 3.1: 4.2 ME...

CVE-2026-82783: Plaintext Storage of a Password

Plaintext storage of a password issue exists in CONPROSYS nano Series . If this vulnerability is exploited, an attacker with physical access to the product may obtain credentials...

CVE-2026-69297

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73437

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

CVE-2026-80176

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

PT-2026-86849

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...

CVE-2026-19051

Menulux Portal by Menulux Software Inc. is vulnerable to plaintext storage of a password , allowing an authenticated low-privilege attacker to retrieve embedded sensitive data over the network. The vulnerability affects versions prior to 20260903211448 . The CNA-assigned CVSS 3.1 score is 7.1 (Hi...

EUVD-2026-71039

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

CVE-2026-82453 rust-iot-platform Cleartext Password Storage via User Model

rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and listing routes to obtain plaintext credentials for all accounts...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5$POST'password' to adduser and updateuserpassword, admin/changecurrentuserpassword.php does the same when a user changes their own password, the forgotten-password path in...

CVE-2026-80211

FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests . The admin/users.php, admin/change_current_user_password.php, and includes/current_user.inc files all pass md5($password) without any per-password salt or adaptive hash (no password_hash()/password_verify()...