CVE-2021-20439

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user...

CVE-2021-21209

Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

MGASA-2021-0126 Updated ceph packages fix security vulnerabilities

A flaw was found in Ceph where Ceph stores mgr module passwords in clear text. This issue can be found by searching the mgr logs for Grafana and dashboard with passwords visible. The highest threat from this vulnerability is to confidentiality CVE-2020-25678. A flaw was found in ceph-dashboard. T...

django-nopassword stores secrets in cleartext

django-nopassword before 5.0.0 stores cleartext secrets in the database...

U.S. Dept Of Defense: Sensitive Information Leaking Through DoD Owned Website. [██████████]

Summary While performing recon work on websites owned by DoD i came up with ██████████ website which is leaking sensitive information. Description The above website is leaking information such as- first name and last name, email address, phone number, house address and organization name of...

CVE-2019-14709

A cleartext password storage issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The file in question is /usr/local/ipsca/mipsca.db. If a camera is compromised, the attacker can gain access to passwords and abuse them to compromise further systems...

CVE-2018-20886

cPanel before 74.0.0 insecurely stores phpMyAdmin session files SEC-418...

Error: Logical Volume mount/activate error when trying to plug the Local Storage

After a server crash, the Local storage is unplugged and when trying to plug it back it gives the following error xe pbd-plug uuid=xxxx-xxxxxx-xxxxx-xxxxxError code: SRBACKENDFAILURE52Error parameters: , Logical Volume mount/activate error opterr=FSCK failed on...

The vulnerability of the Safari browser, which allows a hacker to track users

The vulnerability of the Top Sites function in the Safari browser is related to improper storage of cookie files. Exploiting this vulnerability can allow a malicious actor to remotely track users...

CVE-2012-4862

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2004-1447

Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information...

MySimpleNews 1.0 - Remote Readable Administrator Password

source: https://www.securityfocus.com/bid/5866/info MySimpleNews stores the administrative password in clear text in a remotely viewable HTML file. Any remote user can view the contents of the HTML file to determine the administrator password. The administrator password can be found in the HTML...

CVE-2001-0911

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it...

CVE-1999-1562

gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in 1 the log window, or 2 in a log file...

BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem

--------------------------------------------------------------------- BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem --------------------------------------------------------------------- Subject: local password problem in vpopmail when installed with MySQL module and all other...

Дырка в The Bat! (обратный путь в директориях)

Если The Bat! сконфигурирован на отдельное хранение вложенных файлов, если имя файла зашифровано согласно RFC 2047 base 64 или Quoted Printable и содержит '..' то файл будет помещен в директорию более высокого уровня, что позволяет сохранить файл в любой каталог на том же диске...

Shambala 4.5 vulnerability

Subject: DoS in Shambala Server 4.5 Platforms: Microsoft Windows 9x, WIndows NT and Windows 2000 Risk Level High Author: zillion Vendor: Evolvable Corporation Vendor status: Notified 4 weeks ago. The problem will be fixed in a next release Subject: ========= Shambala Server 4.5 denial of service...

Microsoft Index Server 2.0 - %20 ASP Source Disclosure

Microsoft Index Server 2.0 - %20 ASP Source Disclosure source: https://www.securityfocus.com/bid/1084/info Index Server can be used to cause IIS to display the source of .asp and possibly other server-side processed files. By appending a space %20 to the end of the filename specified in the...

iMailv5.txt

0oooop / Six Toed / Security Advisory Date: 2000, 03/01 Affected Software: iMail Server 5.0 Platform: Windows NT 4.0 SP 6a Problem A malicous user can read and send emails as any other user on the system. How The issue lies in how iMail handles the creating of new email accounts, and how it store...