CVE-2024-35469

CVE-2024-35469 提出者: Kha Do 人事管理システム 1.0 脆弱性 SQLインジェクション 説明 SourceCodester 人事管理システム 1.0 の /hrm/user/ における SQLインジェクションの脆弱性により、攻撃者はpasswordパラメータを介して任意のSQLコマンドを実行できます。 影響を受けるコンポーネント /hrm/user/ 影響 攻撃者はペイロード 'or'1'='1 を使用して、認証情報なしで管理者アカウントでログインできます。 POC 匿名でログイン 脆弱性を含むソースコード 動画...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' および 'password' SQL インジェクション 認証不要 エクスプロイトタイトル: Simple Task Managing System - 'login' および 'password' SQL インジェクション 認証不要 日付: 2022-01-09 エクスプロイト作者: Hamdi Sevben ベンダーホームページ:...

CVE-2024-35468

CVE-2024-35468 提出者: Kha Do 人事管理システム 1.0 脆弱性 SQLインジェクション 説明 SourceCodester 人事管理システム 1.0 の /hrm/index.php における SQL インジェクションの脆弱性により、攻撃者が password パラメータを介して任意の SQL コマンドを実行できる可能性があります。 影響を受けるコンポーネント /hrm/index.php 影響 攻撃者はペイロード 'or'1'='1 を使用して、認証情報なしで管理者アカウントにログインできます。 POC 匿名ログイン 脆弱性を含むソースコード 動画...

CVE-2025-2304-CamaleonCMS-PoC

PoC: CVE-2025-2304 - Camaleon CMS 権限昇格 技術概要 このリポジトリは、Camaleon CMS （バージョン2.8.1より前）におけるMass Assignment 脆弱性の機能的Proof of Concept（PoC）です。この脆弱性は、ユーザ管理モジュールのupdatedajaxエンドポイントに存在し、アプリケーションがpasswordパラメータハッシュ内の機密属性を厳密にフィルタリングしないことに起因します。...

EUVD-2026-62947

In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate item action, because the action's password parameter is not masked and is shown in cleartext in the user interface...

CVE-2026-76384

In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking either the detonate file or detonate url action, because the action's archivepassword parameter is not mask...

CVE-2026-76382

In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate item action, because the action's password parameter is not masked and is shown in cleartext in the user interface...

CVE-2026-76378

In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample password by invoking the detonate file action, because the action's samplepassword parameter is not masked and is shown in...

CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...

CVE-2026-76382 Information Disclosure through Action Parameters in Phantom app for Splunk SOAR

In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate item action, because the action's password parameter is not masked and is shown in cleartext in the user interface...

CVE-2026-76380

CrowdStrike OAuth API app for Splunk SOAR before 5.1.3 fails to mask the document_password parameter on its detonate file and detonate url actions, displaying it in cleartext in the UI. Any user with action-run privileges can read the password. Upgrade to version 5.1.3 or later to resolve. Exploi...

CVE-2026-76381 Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR

In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in...

CVE-2026-76381

CVE-2026-76381 is an information disclosure vulnerability in the MS Graph for Active Directory app for Splunk SOAR , affecting versions below 1.5.2 . The root cause is that the temp_password parameter in the reset password action is not marked as a password field, causing it to be displayed in cl...

CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

CVE-2026-76378

In Cisco Secure Malware Analytics app for Splunk SOAR versions below 2.4.5, the detonate file action's sample_password parameter is not marked as a password type, causing it to display in cleartext in the UI. Any user with action-run permissions can read the sensitive password. CVSS 3.1 scores th...

CVE-2026-76382: Cleartext Storage of Sensitive Information

In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking the deflate item action, because the action's password parameter is not masked and is shown in cleartext in the user interface...

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

CVE-2026-18587

CVE-2026-18587 affects Wavlink WL-NU516U1 (708c073-mt7628). The flaw is in an unknown function of Config Import where manipulating the Password argument can trigger an OS command injection. The issue is exploitable remotely with high impact to confidentiality, integrity, and availability (C/I/A: ...

CVE-2025-67405

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to an SQL Injection flaw. The vulnerability exists in the update_password.php component, specifically triggered via the new_password parameter. This allows for improper neutralization of special elements used in an SQL command...

CVE-2026-15486

A vulnerability has been found in TRENDnet TEW-821DAP 1.11B03. This affects the function sub42026C of the file /goform/toolsddns of the component Firmware Update Handler. Such manipulation of the argument hostname/username/password leads to os command injection. The attack can be launched remotel...