carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

steamer

Steamer 导入、管理、搜索公开数据泄露文件。 你是否拥有大量包含凭据、密码和哈希值的 CSV、.sql、.txt 文件？ 使用 Steamer 来管理它们！将数据加载到 MongoDB 数据库中，然后可以直接使用控制台，或者借助便捷的 Web 界面（支持 JSON 导出）进行操作。 安装 安装 Go 和 MongoDB。 依赖项通过 go.mod 中的 Go 模块进行管理。因此，如果找不到某个模块，Go 会自动下载所需的依赖项。 此时，建议先导入一个较为简单、无需索引即可导入的数据泄露文件。 go run ./importers/adobe.go 现在我们需要为 MongoDB...

DiscoRape

DiscoRape DiscoRape is a selfbot for Discord written in python3.8 The original repository I forked this from can be found here made by EC-discord Preview 📝 Install/Run pip3 install -r requirements.txt Add your token in data/config.json run by doing python3 selfbot.py...

CVE-2020-24227

CVE-2020-24227 Playground Sessions: almacenamiento de credenciales de usuario en texto plano Playground Sessions v2.5.582 y versiones anteriores para Windows almacena las credenciales de usuario en texto plano, lo que permite a cualquier persona con acceso a...

CVE-2026-75136

UpSignOn for Windows versions prior to 7.19.0 contain an insecure credential storage flaw in the biometric unlock key managed via the Windows PasswordVault API. A local attacker running a standard process within the same Windows session can retrieve the key without triggering any authentication p...

EUVD-2026-70261

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

PT-2026-84858

Name of the Vulnerable Software and Affected Versions UpSignOn for Windows versions prior to 7.19.0 Description Insecure credential storage allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering an authentication prompt. A standard...

CVE-2026-53454

Prior to version 2.5.2, Blueprint Studio configured Git's credential.helper store, writing usernames and access tokens in plaintext to a .git-credentials file accessible to other users/processes on the same filesystem, exposing Home Assistant Git credentials; the issue is fixed in 2.5.2. No explo...

CVE-2026-53454 Blueprint Studio stored Git credentials in plaintext Git credential store

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

CVE-2026-53454 Blueprint Studio stored Git credentials in plaintext Git credential store

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

EUVD-2026-61485

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

CVE-2026-66782 Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account SA bearer token within the Submariner Custom Resource CR specification. An attacker with access to the cluster's etcd database or through kubectl get commands could obtai...

PT-2026-77314

Name of the Vulnerable Software and Affected Versions Blueprint Studio versions prior to 2.5.2 Description Blueprint Studio improperly configures the Git credential.helper store when saving credentials. This causes the system to persist usernames and access tokens in plaintext within the...

EUVD-2026-55880

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key. An attacker with high privileges and local access to the server could retrieve these objects and decrypt the stored credentials. Successful...

CVE-2025-15631

CVE-2025-15631 describes a cryptographic weakness in TP-Link Omada devices where site credentials are protected with a legacy hashing algorithm that does not provide sufficient protection. The affected component is credential storage on Omada devices; the root cause is the use of an inadequate ha...

CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized acces...

CVE-2026-65309

ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...

CVE-2026-5040

TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...

CVE-2026-41879

R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash. This allows an attacker who obtain password hash to decode superadmin credentials. Critically, this password cannot be changed except by modifying the configuration file. This issue was fixed in version v3.17-2000...