CVE-2025-70342

CVE-2025-70342: erase-install의 명명된 파이프를 통한 자격 증명 가로채기 요약 v40.4 이전커밋 2c31239의 erase-install은 swiftDialog 자격 증명 출력을 하드코딩된 경로 /var/tmp/dialog.json에 기록합니다. Apple Silicon Mac에서 재설치/지우기 작업 중 입력된 관리자 자격 증명은 이 예측 가능하고 모든 사용자가 쓰기 가능한 위치에 기록됩니다. 로컬의 권한 없는 공격자는 이 경로에 명명된 파이프FIFO를 생성하여 관리자 자격 증명을 실시간으로 가로챌 수...

ldap-swak

LDAP Swiss Army Knife Многофункциональная утилита для LDAP-сервера. Быстрая настройка LDAP-сервера для тестовых целей, MitM-прокси для перехвата открытого текста или пересылки учетных данных NTLM, а также эксплуатация различных уязвимостей Java JNDI/LDAP-клиентов. Автор: Moritz Bechler...

CVE-2026-51954

Prodotto: Webasyst Framework Versione interessata: ≤ 4.0.3 Gravità: Alta CVSS 3.1: 8.0 Descrizione Il framework Webasyst fino alla versione 4.0.3 contiene un difetto nell'implementazione di OAuth 2.0 che consente a un attaccante remoto non autenticato di intercettare le credenziali di...

CVE-2025-26199

🛡️ CVE-2025-26199 — Trasmissione non sicura di password in chiaro in CloudClassroom-PHP-Project v1.0 📄 Descrizione CloudClassroom-PHP-Project v1.0 è vulnerabile alla trasmissione non sicura delle credenziali utente. Durante il processo di autenticazione, le password vengono inviate tramite HTTP no...

teamcity-idea-cve-2020-35667-poc

TeamCity IntelliJ IDEA प्लगइन क्रेडेंशियल इंटरसेप्शन CVE-2020-35667 त्वरित लिंक प्रूफ-ऑफ-कॉन्सेप्ट रिपोर्ट | कार्यप्रवाह विश्लेषण | सर्वर स्क्रिप्ट विवरण यह एक नकली XML-RPC TeamCity एंडपॉइंट बनाकर CVE-2020-35667 का पुनरुत्पादन है। CVE-2020-35667 IntelliJ IDE के लिए JetBrains TeamCity प्लगइन में ए...

Hawk

Hawk Intercepte silenciosamente credenciais SSH e SU em tempo real O Hawk monitora processos sshd e su, extraindo senhas da memória via ptrace sem modificar os processos alvo. Zero gravações. Coleta de credenciais puramente somente-leitura. Demonstração Como Funciona O Hawk aproveita o sistema de...

CVE-2025-63820

CVE-2025-63820 Einreicher: Nicola Giuffrida Informationen Hersteller: TOTOLINK Website des Herstellers: TOTOLINK Modell: A720R Firmware-Version: V4.1.5cu.630B20250509 Firmware-Downloadadresse: TOTOLINK Details zur Schwachstelle Beim Anmelden am Kontrollpanel werden Benutzername und Passwort im...

CVE-2026-46428

CVE-2026-46428 affects the Rust mailer library lettre. Versions 0.10.1 through before 0.11.22 using the boring-tls backend have an inverted-boolean bug that silently disables TLS hostname verification under the default strict configuration. An on-path attacker presenting any chain-valid certifica...

CVE-2026-46428

lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug in lettre's boring-tls integration silently disables TLS hostname verification for callers using the default strict configuration. An on-path attacker presenting any chain-valid...

PYSEC-2026-2590 Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

Description Overview When LDAP TLS is enabled LDAPUSETLS = True, Lemur's LDAP authentication module unconditionally disables TLS certificate verification at the global ldap module level. This allows a man-in-the-middle attacker positioned between Lemur and the LDAP server to intercept all...

CVE-2026-7830 UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

CVE-2026-7830

CVE-2026-7830 affects UltraVNC up to version 1.8.2.2 and concerns the MS-Logon II authentication. The DH key exchange uses parameters within 64-bit space (DH_MAX_BITS) and the private exponent is generated using a rng() that relies on three libc rand() calls seeded from time(NULL). This yields an...

CVE-2026-7830 UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception

UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...

CVE-2026-4522

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1...

GHSA-R7G4-QG5F-QQM2 Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

Summary Nodemailer disables TLS certificate verification in its internal HTTPS fetch client through the use of rejectUnauthorized: false inside lib/fetch/index.js. As a result, OAuth2 token requests trust invalid or self-signed HTTPS certificates and transmit sensitive OAuth credentials over...

Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

Summary Nodemailer disables TLS certificate verification in its internal HTTPS fetch client through the use of rejectUnauthorized: false inside lib/fetch/index.js. As a result, OAuth2 token requests trust invalid or self-signed HTTPS certificates and transmit sensitive OAuth credentials over...

EUVD-2026-36725

Mattermost Desktop App versions =6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that...

CVE-2026-6517

Mattermost Desktop App (versions

CVE-2026-6517 Mattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passed

Mattermost Desktop App versions =6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that...

CVE-2026-6517 Mattermost Desktop App fails to restrict the allow list of domains which NTLM credentials are passed

Mattermost Desktop App versions =6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that...