CVE-2026-107829

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-102368

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware. Successful exploitation of this vulnerability may result in the...

CollaboratorPlusPlus

CollaboratorPlusPlus Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Corey Arthur, [email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus This project is released under AGPL see LICENSE for more information Download from releases here. Backgrou...

CVE-2026-102368 Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware. Successful exploitation of this vulnerability may result in the...

CVE-2026-102368 Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware. Successful exploitation of this vulnerability may result in the...

EUVD-2026-95263

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware. Successful exploitation of this vulnerability may result in the...

CVE-2026-102368

Affected Tapo device firmware, specifically the Tapo S505 , contains a vulnerability where device-specific cryptographic material is stored in plaintext within nonvolatile storage. An attacker with physical access to the device can recover this sensitive material from the firmware. Successful exp...

WMIcmd

The problem When doing low impact investigations and other similar activities you may want to minimize what is written to disk / obvious. This tool allows us to execute commands via WMI and get information not otherwise available via this channel. Purpose A small utility which only uses WMI to...

vcenter_saml_login

Strumento di Accesso SAML per vCenter Uno strumento per estrarre il certificato dell'Identity Provider IdP dai backup di vCenter e accedere come Administrator Contesto Comunemente, durante gli engagement, otteniamo accesso ai backup di vCenter su un file server o accesso root all'host VCSA tramit...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: Cleartext Storage of Sensitive Information in Memory. Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The...

CVE-2026-12948

CVE-2026-12948 Vulnerability Summary A stored cross-site scripting XSS vulnerability was identified in the web management interface of the Digi PortServer TS 4 H MEI. A specially crafted, authenticated request allows a script payload to be permanently written to device configuration storage. The...

passera

Hinweis: Ich habe nicht mehr die Zeit, die Entwicklung von Passera fortzusetzen, aber Pull Requests sind mehr als willkommen! Der am häufigsten angefragte Punkt wäre eine aktualisierte Firefox-Erweiterung, da die letzte API-Änderung die aktuelle Version kaputt gemacht hat. Passera Ein einfaches...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale cloudkit are now fixed in 5.2.3.10 or higher and 6.0.1.2 or higher

Summary The following vulnerabilities that can affect IBM Storage Scale cloudkit are now fixed in 5.2.3.10 or higher and 6.0.1.2 or higher Vulnerability Details CVEID:CVE-2026-84445 DESCRIPTION: gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with...

Security Bulletin: IBM Cloud Pak System is affected by vulnerability [CVE-2026-13463]

Summary Vulnerabilities was addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-13463 DESCRIPTION: IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files. CWE:CWE-798: Use of...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Arbitrary File Read → SECRETKEYBASE Theft → RCE Overview CVE-2026-66066 is a critical-severity CVSS 9.5 pre-authentication arbitrary file read to remote code execution chain in Ruby on Rails Active Storage, affecting Rails 7.2.0–7.2.3...

[SECURITY] [DLA 4829-1] rails security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4829-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 08, 2026 https://wiki.debian.org/LTS -...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...