<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-315</title><description>Every new CWE-315 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-25818: HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cookies, allowing an att…</title><link>https://agentprime.io/advisories/CVE-2026-25818/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25818/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-8528: Exrick xboot getMenuList sensitive information in a cookie</title><link>https://agentprime.io/advisories/CVE-2025-8528/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-8528/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 Aug 2025 22:02:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4537: yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie</title><link>https://agentprime.io/advisories/CVE-2025-4537/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4537/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 11 May 2025 09:31:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-41290: FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie&apos;s component.</title><link>https://agentprime.io/advisories/CVE-2024-41290/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41290/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Oct 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-8644: Cleartext Storage of Sensitive Information in Oceanic Software&apos;s ValeApp</title><link>https://agentprime.io/advisories/CVE-2024-8644/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-8644/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Sep 2024 11:48:53 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>1Panel set-cookie is missing the Secure keyword</title><link>https://agentprime.io/advisories/GHSA-9xfw-jjq2-7v8h/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9xfw-jjq2-7v8h/</guid><description>github.com/1Panel-dev/1Panel &lt;1.9.6, fixed in 1.9.6. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 05 Feb 2024 20:19:30 GMT</pubDate><category>Go</category><category>github.com/1Panel-dev/1Panel</category></item><item><title>dbt-core&apos;s secret env vars written to package-lock.json in plaintext</title><link>https://agentprime.io/advisories/GHSA-j4g3-3q8x-jxqp/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-j4g3-3q8x-jxqp/</guid><description>dbt-core &gt;=1.7.0, &lt;1.7.3, fixed in 1.7.3. CVSS 3.2 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Dec 2023 15:38:37 GMT</pubDate><category>PyPI</category><category>dbt-core</category></item><item><title>CVE-2021-34564: In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie</title><link>https://agentprime.io/advisories/CVE-2021-34564/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34564/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 31 Aug 2021 10:32:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-19941: Cleartext Storage of Sensitive Information in Cookies</title><link>https://agentprime.io/advisories/CVE-2018-19941/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-19941/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 31 Dec 2020 16:33:27 GMT</pubDate><category>CVE</category></item></channel></rss>