Lucene search
+L

2189 matches found

Kitploit
Kitploit
added 2026/08/26 11:16 p.m.2 views

CVE-2023-39144

CVE-2023-39144 Contexto Descobri esta vulnerabilidade em Maio de 2023. A Element55 produz software para escritórios de advocacia para controlo de tempo. Este software obtém informações de várias fontes, como Exchange, SQL e Shoretel. Cronologia 24 de Maio de 2023 - Reportei a vulnerabilidade à...

7.5CVSS7.8AI score0.00535EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:01 p.m.2 views

xpl-ModernWMS-CVE-2024-57698

Раскрытие MD5-хэша пароля администратора - ModernWMS v1.0 - CVE-2024-57698 Проблема в modernwms v.1.0 позволяет злоумышленнику просматривать MD5-хэш пароля администратора и другие атрибуты без аутентификации, даже после начальной настройки и смены пароля. Это происходит из-за чрезмерного раскрыти...

7.5CVSS5.2AI score0.00389EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 10:52 p.m.2 views

CVE-2025-1738

CVE-2025-1738 - PoC для камеры Trivision NC227WF 📋 Обзор В рамках ответственного раскрытия были назначены два официальных CVE. CVE| CVSS v3.1| Оценка| CWE| Тип ---|---|---|---|--- CVE-2025-1738| AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| 6.2| CWE-598| Раскрытие пароля в открытом виде 🔍 CVE-2025-1738 —...

6.2CVSS5.2AI score0.0017EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 8:55 p.m.4 views

CVE-2024-56428

CVE-2024-56428 Credenciais em texto claro no banco de dados local do iLabClient Ler a configuração incluindo a senha O iLabClient é usado para baixar os resultados do servidor de laboratório. Os dados de configuração são armazenados localmente na instância Apache Derby iLabClient. A senha é...

5.5CVSS5.2AI score0.00153EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

keysweeper

KEYSWEEPER // SIGINT // SAMY.PL // REL A TUTTI // HACKING APPLICATO KeySweeper KeySweeper è un dispositivo stealth basato su Arduino, mimetizzato come un caricabatterie da muro USB funzionante, che intercetta, decripta, registra e trasmette via GSM in modalità wireless e passiva tutte le pression...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.3 views

CVE-2019-6693

CVE-2019-6693 Hai cambiato le tue chiavi di crittografia FortiGate predefinite? Esegui questo script e scoprilo! Puoi fornire l'intero dump del file di configurazione o singoli valori crittografati. Se i valori decrittati non sono del tutto senza senso o producono una parola, allora è probabile c...

6.5CVSS6.3AI score0.05617EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.83 views

WordPress Download Manager - File Password Exposure

The WordPress Download Manager plugin contains a vulnerability that allows attackers to obtain passwords for password-protected downloads by sending a specially crafted request to the validate-password API endpoint. id: CVE-2023-6421 info: name: WordPress Download Manager - File Password Exposure...

7.5CVSS7.4AI score0.02437EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/25 11:18 p.m.2 views

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept della vulnerabilità mikrotik CVE-2018-14847 soprattutto su winbox, funziona leggendo la password direttamente da RouterOS sulla porta predefinita 8291. Originale di: https://github.com/BigNerd95/ Requisiti Python 3+ Installazione su Linux root@kitploit:...

9.1CVSS8.7AI score0.96087EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/25 8:43 a.m.2 views

CVE-2023-46501

CVE-2023-46501 - BoltWire v6.03 - अनुचित पहुँच नियंत्रण विवरण बोल्टवायर CMS के संस्करण 6.03 में, index.php?p=member.admin&action=data पैरामीटर के माध्यम से "अनुचित पहुँच नियंत्रण" कमजोरी का शोषण करना संभव है, जो एक हमलावर को किसी भी सदस्य का पासवर्ड देखने की अनुमति देता है, जिसमें एडमिन का भी शाम...

9.1CVSS8.6AI score0.01267EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/25 1:30 a.m.7 views

EUVD-2026-65219

Grav before 2.0.16 allows sandboxed Twig templates to access sensitive User fields through allow-listed offsetGet and offsetexists methods that lack field filtering. Attackers with page-edit permissions can call offsetGet on User objects to extract hashed passwords and 2FA secrets, enabling offli...

8.7CVSS5.4AI score0.00272EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 1:30 a.m.14 views

CVE-2026-76839

Grav before 2.0.16 is affected by an information disclosure vulnerability in its sandboxed Twig templates. The allow-listed offsetGet() and offsetexists() methods lack field filtering on User objects , permitting attackers with page-edit permissions to extract hashed passwords and 2FA secrets , e...

8.7CVSS5.4AI score0.00272EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 11:11 a.m.13 views

EUVD-2026-64827

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

7.1CVSS5.3AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:11 a.m.35 views

CVE-2026-6017 Missing Authentication for Critical Function in KAON PG5298

Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

7.1CVSS0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/20 12:35 a.m.10 views

EUVD-2026-62945

In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive document password by invoking either the detonate file or detonate url action, because the action's documentpassword parameter is not masked an...

4.3CVSS5.3AI score0.00139EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 10:17 p.m.8 views

CVE-2026-76386

In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by invoking one of the create meeting, update meeting, or update user settings actions, because the affected password and...

4.3CVSS0.00139EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 10:17 p.m.4 views

CVE-2026-76377

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

4.3CVSS0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 9:35 p.m.10 views

CVE-2026-76384

In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR , the archive_password parameter used by the detonate file and detonate url actions is not marked as a password by the application. As a result, the value is displayed in cleartext in the Splunk SOAR user interface, a...

4.3CVSS5.3AI score0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 11:25 p.m.23 views

CVE-2025-11729

The WordPress PPWP plugin (≤1.9.15) has an improper capability check in its can_access function, allowing authenticated Contributors and above to retrieve the master password and bypass protection on any password-protected post or page. CVSS 4.3 (Medium). The plugin's changelog shows a fix was ap...

4.3CVSS5.4AI score0.00209EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/18 11:25 p.m.33 views

CVE-2025-11729 PPWP: Password Protect Pages, Posts & Full or Partial Content <= 1.9.15 - Improper Authorization To Authenticated (Contributor+) Master Password Exposure

The PPWP: Password Protect Pages, Posts & Full or Partial Content plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the canaccess function in all versions up to, and including, 1.9.15. This makes it possible for authenticated attackers, with...

4.3CVSS0.00209EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/17 11:04 a.m.38 views

CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument

opensslencrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/pid/cmdline to retrieve plaintext passwords and keystore passwords...

8.7CVSS0.00227EPSS
SaveExploits0References2
Rows per page
Query Builder