CVE-2020-6954

CVE-2020-6954 affects Cayin SMP-PRO4 digital signage players. A user can view a saved password by inspecting the URL after a Connection String Test; the password is exposed in the webpass parameter of the media_folder.cgi?apply_mode=ping_server URI. The impact is partial confidentiality (per CVSS...

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

Design/Logic Flaw

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

CVE-2011-5247

CVE-2011-5247 affects Snare for Linux prior to 1.7.0. The vulnerability arises in the web interface ( RemotePassword field in the /remote page); the password is disclosed by inspecting the page source, as the MD5 hash of the password is exposed. This constitutes an information disclosure vulnerab...

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

CVE-2019-19342

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose wi...

CVE-2019-19342

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose wi...

CVE-2019-19342

CVE-2019-19342 affects Red Hat Ansible Tower 3.6.x before 3.6.2 and 3.5.x before 3.5.4. When a request to /websocket includes a password containing the character ‘#’, the parsing in RabbitMQ can trigger a socket error and return HTTP 500 with partial plaintext password disclosure. This enables br...

CentOS Web Panel Password Disclosure Vulnerability

CentOS Web Panel CWP is a free web hosting control panel. A password disclosure vulnerability exists in CentOS Web Panel. An attacker can exploit this vulnerability to disclose passwords...

Control Web Panel 0.9.8.864 phpMyAdmin Password Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title : CWP Control Web Panel phpMyAdmin password access Exploit Author : Pongtorn Angsuchotmetee, Nissana Sirijirakal, Narin Boonwasanarak Vendor Homepage : https://control-webpanel.com/ Software Link : Not available, user panel only...

Important: Red Hat Security Advisory: Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container Added a command to generate a new SECRETKEY and rekey the database Removed the guest user from the optionally-configured RabbitMQ admin interface CVE-2019-19340 Fixed slow queries for /api/v2/instances and /api/v2/instancegroups when smart inventori...

CVE-2019-19342

A flaw was found in Ansible Tower 3.6.1 and 3.5.3 when /websocket is requested and the password contains the '' character. This request would cause a socket error in RabbitMQ when parsing the password and an HTTP error code 500 and partial password disclose will occur in plaintext. An attacker...

Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server (CCS) Information Disclosure Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. An information disclosure vulnerability exists in Siemens SiNVR 3 Video Server and SiNVR 3 Central Control Server CCS. A local...

Design/Logic Flaw

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Ansible: disclosure data when prompted for password and template characters are passed

A data disclosure flaw was found in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest...

Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Intelbras Router WRN150 1.0.18 - Cross-Site Request Forgery Exploit Author: Prof. Joas Antonio Vendor Homepage: https://www.intelbras.com/pt-br/ Software Link: http://en.intelbras.com.br/node/25896 Version: 1.0.18 Tested on...

Socomec DIRIS A-40 Password Disclosure Vulnerability

Socomec DIRIS A-40 is a network management solution developed by SOCOMEC for its Uninterruptible Power Supply UPS products to enable remote monitoring, condition management and automated operation of UPS. A password disclosure vulnerability exists in Socomec DIRIS A-40, which arises from errors...

CloudBees Jenkins SourceGear Vault Plugin Password Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release , test projects and some timed tasks . Dependency Graph Viewer Plugin is used in whi...

CloudBees Jenkins LDAP Email Plugin Password Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dependency Graph Viewer Plugin is used in...