CVE-2023-39144

CVE-2023-39144 Contexto Descobri esta vulnerabilidade em Maio de 2023. A Element55 produz software para escritórios de advocacia para controlo de tempo. Este software obtém informações de várias fontes, como Exchange, SQL e Shoretel. Cronologia 24 de Maio de 2023 - Reportei a vulnerabilidade à...

xpl-ModernWMS-CVE-2024-57698

Раскрытие MD5-хэша пароля администратора - ModernWMS v1.0 - CVE-2024-57698 Проблема в modernwms v.1.0 позволяет злоумышленнику просматривать MD5-хэш пароля администратора и другие атрибуты без аутентификации, даже после начальной настройки и смены пароля. Это происходит из-за чрезмерного раскрыти...

CVE-2025-1738

CVE-2025-1738 - PoC для камеры Trivision NC227WF 📋 Обзор В рамках ответственного раскрытия были назначены два официальных CVE. CVE| CVSS v3.1| Оценка| CWE| Тип ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Раскрытие пароля в открытом виде 🔍 CVE-2025-1738 —...

CVE-2024-56428

CVE-2024-56428 Credenciais em texto claro no banco de dados local do iLabClient Ler a configuração incluindo a senha O iLabClient é usado para baixar os resultados do servidor de laboratório. Os dados de configuração são armazenados localmente na instância Apache Derby iLabClient. A senha é...

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL A TUTTI // HACKING APPLICATO KeySweeper KeySweeper è un dispositivo stealth basato su Arduino, mimetizzato come un caricabatterie da muro USB funzionante, che intercetta, decripta, registra e trasmette via GSM in modalità wireless e passiva tutte le pression...

CVE-2019-6693

CVE-2019-6693 Hai cambiato le tue chiavi di crittografia FortiGate predefinite? Esegui questo script e scoprilo! Puoi fornire l'intero dump del file di configurazione o singoli valori crittografati. Se i valori decrittati non sono del tutto senza senso o producono una parola, allora è probabile c...

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux root@kitploit:...

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - अनुचित पहुँच नियंत्रण विवरण बोल्टवायर CMS के संस्करण 6.03 में, index.php?p=member.admin&action=data पैरामीटर के माध्यम से "अनुचित पहुँच नियंत्रण" कमजोरी का शोषण करना संभव है, जो एक हमलावर को किसी भी सदस्य का पासवर्ड देखने की अनुमति देता है, जिसमें एडमिन का भी शाम...

EUVD-2026-65219

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...

CVE-2026-76839

Grav before 2.0.16 is affected by an information disclosure vulnerability in its sandboxed Twig templates. The allow-listed offsetGet() and offsetexists() methods lack field filtering on User objects , permitting attackers with page-edit permissions to extract hashed passwords and 2FA secrets , e...

EUVD-2026-64827

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

CVE-2026-6017 Missing Authentication for Critical Function in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

EUVD-2026-62945

In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive document password by invoking either the detonate file or detonate url action, because the action's documentpassword parameter is not masked an...

CVE-2026-76386

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

CVE-2026-76377

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

CVE-2026-76384

In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR , the archive_password parameter used by the detonate file and detonate url actions is not marked as a password by the application. As a result, the value is displayed in cleartext in the Splunk SOAR user interface, a...

CVE-2025-11729

The WordPress PPWP plugin (≤1.9.15) has an improper capability check in its can_access function, allowing authenticated Contributors and above to retrieve the master password and bypass protection on any password-protected post or page. CVSS 4.3 (Medium). The plugin's changelog shows a fix was ap...

CVE-2025-11729 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...

CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...