RdpThief

RdpThief RdpThief en lui-même est une DLL autonome qui, lorsqu'elle est injectée dans le processus mstsc.exe, effectue un croisement d'API, extrait les identifiants en texte clair et les enregistre dans un fichier. Un script agresseur l'accompagne, qui est responsable de la gestion de l'état, de ...

SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got Cet outil vous permet d'effectuer de l'OSINT et de la reconnaissance sur une organisation ou un individu. Il permet de rechercher 1,4 milliard d'identifiants en texte clair qui ont été divulgués dans le cadre de la fuite BreachCompilation. Cette base de données rend la...

EUVD-2026-19697

An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 5.3...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2026-16129)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server. The...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server. The...

CVE-2026-0503

Due to missing authorization check in the SAP ERP Central Component SAP ECC and SAP S/4HANA SAP EHS Management, an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can...

CVE-2026-0503: Missing Authorization

Due to missing authorization check in the SAP ERP Central Component SAP ECC and SAP S/4HANA SAP EHS Management, an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can...

CVE-2019-11663

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2026-22537

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22544

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22544

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22537

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537

CVE-2026-22537 concerns Efacec QC electric vehicle charging posts (60/90/120). The core issue is insufficient system hardening that could let a user with management/maintenance access read files containing plaintext credentials or other sensitive information. Reported by Red Hat, NVD, CNNVD, CIRC...

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22544

CVE-2026-22544 is described across multiple feeds as a vulnerability where credentials can be detected in clear text over a network. Connected sources confirm the impact across various contexts, including a specific example in Efacec QC charging posts (CNNVD) and generic network exposure (NVD, Re...

PT-2026-2206

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description An attacker with a network connection could detect credentials in clear text. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2026-22537: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...