CVE-2023-51740

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web...

Authentication flaw

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web...

CVE-2023-51741

CVE-2023-51741 affects Skyworth Router CM5100, version 4.1.1.24. The root cause is the transmission of authentication credentials in plaintext over the network, allowing a remote attacker to eavesdrop network traffic and extract username and password from the router’s web interface (Password Rese...

CVE-2024-0556

CVE-2024-0556 describes a weakness in the WIC200 system (version 1.1) where weak cryptography for passwords can allow a remote attacker to intercept traffic and retrieve credentials from another user. The attack enables decoding credentials in Base64, exposing plaintext credentials. The vulnerabi...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from storing plaintext credentials in a different location, which allows an attacker with local acce...

Genie Aladdin Connect Mobile Application Security Vulnerability

Genie Aladdin Connect Mobile Application is a garage door opener control software from Genie. A security vulnerability exists in Genie Aladdin Connect Mobile Application 5.65 Build 2075 and prior versions, which stems from the fact that a user's product account authentication data is stored in...

Sesami Cash Point & Transport Optimizer Security Vulnerability

Sesami Cash Point & Transport Optimizer is a solution from Sesami Corporation. A security vulnerability exists in Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 that stems from the presence of an unknown issue. Allows a remote attacker to obtain sensitive information by transmitting...

CVE-2023-34829

Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...

CVE-2023-34829

Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext...

CVE-2023-34829

CVE-2023-34829 affects TP-Link Tapo prior to v3.1.315. The issue is incorrect access control that allows an attacker to obtain user credentials in plaintext, exposing confidentiality (base score 6.5, MEDIUM). The vulnerability impacts authentication/credential handling and is supported by multipl...

TP-LINK Tapo Security Breach

TP-LINK Tapo is a series of secure WiFi cameras from the Chinese company TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to v3.1.315, which stems from incorrect access control allowing an attacker to access user credentials in plaintext...

PT-2023-25016 · Tp Link · Tp-Link Tapo

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo versions prior to 3.1.315 Description: The issue is related to incorrect access control, allowing attackers to access user credentials in plaintext. Recommendations: For versions prior to 3.1.315, update to version 3.1.315 or lat...

CVE-2023-6791

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface...

CVE-2023-6791

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface...

PAN-OS: Plaintext Disclosure of External System Integration Credentials

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface. Work around: This issue...

Palo Alto Networks PAN-OS Security Vulnerability

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a vulnerability that allows an attacker to obtain plaintext credentials for external system integration e.g. LDAP, etc...

Red Hat Infinispan Security Vulnerability

Red Hat Infinispan is a suite of distributed caching and key-value NoSQL datastore software from Red Hat USA. A security vulnerability exists in Red Hat Infinispan that stems from returning credentials from a configuration in plaintext...

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in improper restrictions on path names in the catalog. This allows attackers to disclose user information, obtain login credentials in plain text, or perform NTLM relay attacks.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose user information, obtain login credentials in...

CVE-2023-47279

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...

CVE-2023-47279

In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtain plaintext credentials, or perform NTLM relaying...