8962 matches found
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to the transmission of confidential information in plaintext, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the transmission of confidential information in plaintext. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2025-44612
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44612
CVE-2025-44612 affects Tinxy WiFi Lock Controller v1 RF. The issue is that sensitive data (control information and device credentials) is transmitted in plaintext over the network, enabling potential interception via a man-in-the-middle attack. Documented impact: confidentiality exposure (high), ...
PT-2025-23234 · Unknown · Tinxy Wifi Lock Controller
Name of the Vulnerable Software and Affected Versions: Tinxy WiFi Lock Controller version v1 RF Description: The issue concerns the storage of sensitive user information, including credentials and mobile phone numbers, in plaintext. Recommendations: For Tinxy WiFi Lock Controller version v1 RF,...
CVE-2025-44614
CVE-2025-44614 affects Tinxy WiFi Lock Controller v1 RF. The issue is that the device/component stores users’ sensitive data (credentials and mobile numbers) in plaintext, creating potential information leakage. The core root cause is unencrypted storage of sensitive data on the device. As per re...
CVE-2025-44612
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44614
Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext...
CVE-2025-44612
Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack...
MICI NetFax Server 安全漏洞
MICI NetFax Server is a product suite from China's MICI Corporation MICI designed to receive fax messages to user mailboxes via e-mail traffic. A security vulnerability exists in MICI NetFax Server versions prior to 3.0.1.0, which originates from the possibility that an authenticated user could...
TeleMessage 安全漏洞
TeleMessage is a secure and compliant messaging solution for organizations from TeleMessage Israel. A security vulnerability exists in TeleMessage version 2025-05-05 and earlier, which stems from storing plaintext messages in memory, which could lead to message disclosure...
PhonePe 安全漏洞
PhonePe is a digital wallet and online payment application from PhonePe India. A security vulnerability exists in PhonePe version 25.03.21.0, which stems from a plaintext storage issue in the file /data/data/com.phonepe.app/databases/...
CVE-2024-3082
A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers e.g., full-disk encryption have been enabled...
CVE-2024-28327
Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings...
CVE-2024-21869
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...
CVE-2024-41954
FOG is a cloning/imaging/rescue suite/inventory management system. The application stores plaintext service account credentials in the "/opt/fog/.fogsettings" file. This file is by default readable by all users on the host. By exploiting these credentials, a malicious user could create new accoun...
CVE-2024-36589
An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend commit 57837 to cd815 was discovered to store credentials in plaintext...