Lucene search
+L

8967 matches found

Kitploit
Kitploit
added 2026/09/14 8:38 a.m.90 views

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 4:44 a.m.9 views

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

10CVSS8.1AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/14 2:38 a.m.8 views

h2csmuggler

h2cSmuggler Description h2cSmuggler smuggles HTTP traffic past insecure edge-server proxypass configurations by establishing HTTP/2 cleartext h2c communications with h2c-compatible back-end servers, allowing a bypass of proxy rules and access controls. See my detailed write-up below for: Technica...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/09/14 2:17 a.m.7 views

CVE-2026-31278

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

7.7CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 12:00 a.m.9 views

CVE-2026-31278

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

7.7CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 12:00 a.m.40 views

CVE-2026-31278

Suprema BioStar 2 (before 2.9.12 ) and BioStar X (before 1.0.2 ) expose Active Directory service account credentials in cleartext via a crafted GET request to the /api/v2/setting/adserversetting endpoint. The vulnerability requires low privileges and has a changed scope , as the leaked credential...

7.7CVSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.8 views

PT-2026-91010

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

7.7CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/14 12:00 a.m.7 views

EUVD-2026-77158

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request...

7.7CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 11:37 p.m.11 views

creds.py

Nueva versión con mucho más análisis: https://github.com/DanMcInerney/net-creds creds.py Captura credenciales FTP/POP/IMAP/HTTP/IRC junto con datos interesantes de cada uno de los protocolos. Si no se especifica una interfaz con la opción -i, el script usará la interfaz conectada a internet que...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 11:22 p.m.7 views

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

7.5CVSS7.3AI score0.00535EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 11:19 p.m.7 views

SuperMicro-Password-Scanner

Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 https://crowdshield.com Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text password file contains IPMI...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:21 p.m.9 views

CVE-2020-25748

CVE-2020-25748 Suggested description A Cleartext Transmission issue was discovered on Rubetek RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339. Someone in the middle can intercept and modify the video data from the camera, which is transmitted in an unencrypted form. One can als...

8.1CVSS7.5AI score0.00844EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:35 p.m.9 views

CVE-2018-16987

CVE-2018-16987 Esta es una vulnerabilidad de almacenamiento de texto claro de información sensible y exposición de información sensible que encontré en Squash TM durante una prueba de penetración. SquashTM Squash TM es una interfaz web utilizada para gestionar casos de prueba. Enlace al proyecto...

7.2CVSS7.4AI score0.01297EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:48 p.m.8 views

POC-CVE-2022-26671

If you got here, you know why this repo needed created. CVE-2022-26671 GET /AT/ATDefault.aspx Line's 430 contains the cleartext credential. secom | supervisor In regards to to responsible disclosure, not dislcosing a hardcoded cleartext HTTP body response is silly when its the login page./...

7.5CVSS7.2AI score0.00976EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:44 p.m.7 views

CVE-2024-56428

CVE-2024-56428 Credenciales en texto claro en la base de datos local del iLabClient Leer la configuración incl. contraseña El iLabClient se utiliza para descargar los resultados del servidor de laboratorio. Los datos de configuración se almacenan localmente en la instancia de Apache Derby...

7.7CVSS5.9AI score0.00157EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 5:22 p.m.6 views

Wifi-Dumper

Wifi-Dumper This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements. Features Optio...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.104 views

Powertek Firmware <3.30.30 - Authorization Bypass

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

9.8CVSS7.2AI score0.14116EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.297 views

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. id: CVE-2020-27986 info: name: SonarQube - Authentication Bypass author: pikpikcu severity: high description: | SonarQube 8.4.2.36762 allows remote attackers to...

8.8CVSS7.5AI score0.15966EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 3:36 p.m.7 views

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 Un problema en el router WiFi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permite a un atacante remoto obtener información sensible debido a la falta de cifrado durante el proceso de inicio de sesión. CVE-2024-42657: Resumen: Una vulnerabilidad en el router WiFi wishnet...

7.5CVSS6AI score0.00481EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:24 p.m.6 views

CVE-2025-1738

CVE-2025-1738 - Cámara Trivision NC227WF PoC 📋 Resumen Tras la divulgación responsable, se asignaron dos CVEs oficiales. CVE| CVSS v3.1| Puntuación| CWE| Tipo ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Exposición de contraseña en texto claro 🔍...

6.2CVSS6AI score0.00168EPSS
SaveExploits2
Rows per page
Query Builder