1700 matches found
EUVD-2025-210960
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2025-36421
IBM Controller versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 are affected by a cleartext transmission vulnerability (CWE-319 ). The product transmits data without encryption, allowing an attacker positioned between the client and server to intercept and obtain sensitive informa...
RdpThief
RdpThief RdpThief 本身是一个独立的 DLL，当注入到 mstsc.exe 进程时，会执行 API 挂钩，提取明文凭据并将其保存到文件中。 它附带一个攻击脚本，用于管理状态、监控新进程并将 shellcode 注入到 mstsc.exe 中。该 DLL 已使用 sRDI 项目 https://github.com/monoxgas/sRDI 转换为 shellcode。启用后，RdpThief 将每 5 秒获取一次进程列表，搜索 mstsc.exe 并注入其中。 当攻击脚本加载到 Cobalt Strike 中时，将提供三个新命令： rdpthiefenable –...
mimipenguin
MimiPenguin 2.0 一种用于从当前 Linux 桌面用户转储登录密码的工具。改编自流行 Windows 工具 mimikatz 背后的思路。此漏洞被分配了 CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781。有趣的是，它在 GNOME Keyring 3.27.2 之后仍未修复，并且在 3.28.0.2-1ubuntu1.18.04.1 中仍然有效。 详细信息 通过转储进程并提取包含明文密码概率较高的行，利用内存中的明文凭据。将尝试通过检查 /etc/shadow...
c0ntextomy
c0ntextomy 一种非正式谬误和虚假归因类型，其中一段文本被从其上下文中移除，从而扭曲其原本意图。 维基百科 - 断章取义 一个概念验证，演示了通过调试会话劫持、远程代码执行和敏感数据窃取进行的漏洞利用。 安全公告 macOS/Xcode 的 MobileDevice.framework 以及 iOS/iPadOS/tvOS 的开发工具存在设计缺陷，导致网络通信以明文形式传输，尽管服务连接设置确实执行了 SSL 握手。 有关漏洞的详细信息、受影响组件及版本，请参阅 advisory.md。 作者 Dany Lisiansky @danyl931，独立安全研究员 Nikias...
SMWYG-Show-Me-What-You-Got
SMWYG-Show-Me-What-You-Got 该工具允许你对组织或个人进行OSINT和侦察。它可以搜索作为BreachCompilation泄露一部分被转储的14亿条明文凭证。此数据库使得查找密码比以往更快、更容易。 截图 上图搜索了uber.com的凭证，并找到了203个账户。 前提条件 请确保已安装以下内容： root@kitploit: - Python 3.0 or later. - pip3 sudo apt-get install python3-pip 如何安装？ root@kitploit: git clone...
CVE-2025-60791
CVE-2025-60791 CVE-2025-60791: Almacenamiento en texto claro de información sensible en memoria. Easywork Enterprise 2.1.3.354 es vulnerable al almacenamiento en texto claro de información sensible en memoria. La aplicación deja claves de licencia válidas vinculadas al dispositivo en la memoria d...
rConfig <=3.9.4 - SQL Injection
rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...
EUVD-2026-81008
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...
CVE-2026-73457 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...
CVE-2026-73457
CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled. When the EosRpcAuth trace facility is explicitly activated on the Gnpsi agent, client credentials (username and password) are written in clear text to local or remote accounting logs, acce...
CVE-2026-73466
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...
EUVD-2026-79024
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...
MariaDB 3.4.0 < 3.4.10
The version of MariaDB installed on the remote host is prior to 3.4.10. It is, therefore, affected by a vulnerability as referenced in the GHSA-fmq9-qjxj-qpf7 advisory. - Impact In the Zero-Configuration SSL protocol, the MariaDB client must refuse sending clear-text password over unverified TLS...
org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)
Summary The connector does not gate clear-text password authentication plugins on transport encryption. A hostile or man-in-the-middle MariaDB server can request a clear-text plugin over an unencrypted plain-TCP connection, and the driver responds with the user's password in cleartext on the wire...
EUVD-2026-68023
MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a...
CVE-2026-55215
MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...
PT-2026-83376
Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver does not require a secure transport before using clear-text password authentication plugins. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest...
Astra Linux – Vulnerability in Ceph
A flaw was discovered in Ceph versions prior to 16.y.z, where Ceph stores mgr module passwords in plain text. This can be identified by searching the mgr logs using Grafana and the dashboard, as the passwords are visible...