CVE-2023-50945 IBM Common Licensing information disclosure

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user...

CVE-2023-50945

IBM Security Bulletin (4CD2A2FD82F36F35C228C749EF006B94401908FFBE17D0B20533D071D61360D0) notes that IBM Common Licensing affects Agent 9.0 and ART 9.0, where user passwords could be exposed in the browser console due to stored credentials. The information-disclosure stems from password exposure v...

PT-2025-1553 · Ibm · Ibm Common Licensing

Name of the Vulnerable Software and Affected Versions: IBM Common Licensing version 9.0 Description: The issue is related to the storage of user credentials in plain clear text, which can be read by a local user. This allows an attacker to gain unauthorized access to protected information. The...

CVE-2025-0705 JoeyBling bootplus QrCodeController.java qrCode redirect

A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text lead...

GHSA-V34R-VJ4R-38J6 Updatecli exposes Maven credentials in console output

Summary Private maven repository credentials leaked in application logs in case of unsuccessful retrieval operation. Details During the execution of an updatecli pipeline which contains a maven source configured with basic auth credentials, the credentials are being leaked in the application...

CVE-2025-24627

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

CVE-2025-24627

CVE-2025-24627 concerns the WordPress plugin Blur Text. The vulnerability is an authenticated stored XSS vulnerability that affects Blur Text versions n/a through 1.0.0. Wordfence references show a patch status of Patched for Blur Text

CVE-2025-24627 WordPress Blur Text Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

CVE-2025-24627 WordPress Blur Text Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

Seasoning email threats with hidden text salting

Cisco Talos observed an increase in the number of email threats leveraging hidden text salting also known as "poisoning" in the second half of 2024. Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely...

WordPress Blur Text Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Blur Text versions = 1.0.0...

OESA-2025-1085 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. Thi...

CVE-2025-24627: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linnea Huxford Blur Text blur-text allows Stored XSS.This issue affects Blur Text: from n/a through = 1.0.0...

WordPress plugin Blur Text has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-5455 · Linsoftware · Linsoftware Blur Text

Name of the Vulnerable Software and Affected Versions: LinSoftware Blur Text versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: Fo...

PT-2025-4014 · Joeybling · Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A vulnerability has been found in the qrCode function of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the text argument...

CVE-2024-55928

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928 Clear text secrets returned & Remote system secrets in clear text

Xerox Workplace Suite exposes sensitive secrets in clear text, both locally and remotely. This vulnerability allows attackers to intercept or access secrets without encryption...

CVE-2024-55928

Summary: CVE-2024-55928 affects Xerox Workplace Suite. Public docs confirm the issue involves secrets exposed in clear text (locally and remotely) due to insecure handling, with the likely impact of unauthorized access to sensitive secrets. Affected product/details: Xerox Workplace Suite (print m...