PT-2026-5860

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access...

CVE-2024-58276

Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /getsubject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames...

EUVD-2002-2300

Malware in sbrugna...

EUVD-2005-2286

Malware in sbrugna...

EUVD-2013-4171

Malware in sbrugna...

EUVD-1999-1107

Malware in sbrugna...

EUVD-2006-6657

Malware in sbrugna...

EUVD-2005-1649

Malware in sbrugna...

EUVD-2009-2020

Malware in sbrugna...

EUVD-2008-5735

Malware in sbrugna...

EUVD-2018-8506

Malware in sbrugna...

EUVD-2002-0341

Malware in sbrugna...

EUVD-2008-6021

Malware in sbrugna...

EUVD-2006-4475

Malware in sbrugna...

EUVD-2008-5901

Malware in sbrugna...

EUVD-2021-30002

Malicious code in bioql PyPI...

CVE-2022-43933

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and passwords...

CVE-2002-2322

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2025-25381

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords...

CVE-2025-25381

CVE-2025-25381 affects the KSRTC AWATAR Android app (KSRTC Karnataka) with insecure plaintext storage of sensitive user data in SharedPreferences. The connected exploit documentation alleges plaintext credentials and personal data stored in shared_prefs, exposing users to device compromise if an ...