Search Vulnerabilities

XIQ‑SE NAC Admin Credential Exposure via HTTP Response

In preloader, there is a possible read of device unique identifiers due to a logic error

Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret

Mobility46 mobility46.se Insufficiently Protected Credentials

EV Energy ev.energy Insufficiently Protected Credentials

SWITCH EV swtchenergy.com Insufficiently Protected Credentials

EV2GO ev2go.io Insufficiently Protected Credentials

CloudCharge cloudcharge.se Insufficiently Protected Credentials

Chargemap chargemap.com Insufficiently Protected Credentials

NeuVector scanner insecurely handles passwords as command arguments

Jinan USR IOT Technology Limited (PUSR) USR-W610 Insufficiently Protected Credentials

OpenClaw: Telegram bot token exposure via logs

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device

YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI

Edimax EW-7438RPn 1.13 - Information Disclosure (WiFi Password)

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

malcontent's OCI image scanning could expose registry credentials

M/Monit 3.7.4 - Password Disclosure

Password Confirmation Bypass in Omada Controller

Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass