673 matches found
IBM Aspera HTTP Gateway 安全漏洞
IBM Aspera HTTP Gateway is a large file transfer component from International Business Machines IBM. A security vulnerability exists in IBM Aspera HTTP Gateway version 2.3.1 and prior versions that originates from storing sensitive information in plaintext, which could be read by unauthenticated...
CVE-2025-57806
Local Deep Research is an AI-powered research assistant for deep, iterative research. Versions 0.2.0 through 0.6.7 stored confidential information, including API keys, in a local SQLite database without encryption. This behavior was not clearly documented outside of the database architecture page...
CVE-2025-55280
This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the...
CVE-2025-55280
CVE-2025-55280 (ZKTeco WL20) : The device stores Wi‑Fi credentials, configuration data, and system data in plaintext inside its firmware. An attacker with physical access could extract the firmware, reverse‑engineer binaries, and read the sensitive data, potentially gaining unauthorized network a...
CVE-2025-55280 Information Disclosure Vulnerability in ZKTeco WL20
This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the...
CVE-2025-54876
The Janssen Project is an open-source identity and access management IAM platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local clicmd.log file. This is fixed in the nightly prerelease...
CVE-2025-7357
CVE-2025-7357 affects Lite-On IC48A and IC80A EV chargers. Firmware versions prior to 01.00.19r (IC48A) and prior to 01.01.12e (IC80A) store FTP-server credentials in cleartext within system logs. Public details from multiple sources (NVD, Red Hat, CVE List, PT Security, CISA ICS advisory) confir...
CVE-2014-6274 S3 and Glacier remotes creds embedded in the git repo were not encrypted
git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in effectively plaintext, not encrypted as they were supposed to be. This issue affects...
CVE-2025-45001
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...
GHSA-FJ44-H6XW-896G react-native-keys insecurely stores encryption cipher and Base64 chunks
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...
CVE-2025-45001
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...
CVE-2025-45001
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure remote as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller
Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
CVE-2025-44614 affects Tinxy WiFi Lock Controller v1 RF. The issue is that the device/component stores users’ sensitive data (credentials and mobile numbers) in plaintext, creating potential information leakage. The core root cause is unencrypted storage of sensitive data on the device. As per re...
PhonePe 安全漏洞
PhonePe is a digital wallet and online payment application from PhonePe India. A security vulnerability exists in PhonePe version 25.03.21.0, which stems from a plaintext storage issue in the file /data/data/com.phonepe.app/databases/...