PasswordFilter

PasswordFilter 2 способа использования DLL-фильтра паролей для записи пароля в открытом виде Подробнее: https://3gstudent.github.io/Password-Filter-DLL%E5%9C%A8%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E4%B8%AD%E7%9A%84%E5%BA%94%E7%94%A8...

tsh-sctp

Tiny SHell - 오픈소스 UNIX 백도어 root@kitploit: Tiny SHell 컴파일 전 1. 우선, tsh.h에 있는 비밀 키를 설정해야 합니다. 키는 어떤 길이든 가능합니다더 나은 보안을 위해 최소 12자 이상 사용할 것. 2. 서버가 수신 연결을 기다릴 포트인 SERVERPORT를 변경하는 것이 좋습니다. 3. 방화벽이 있는 시스템에서 실행되는 경우 "connect-back" 모드로 tshd를 시작하는 것이 좋습니다. tsh.h에서 CONNECTBACKHOST의 주석을 해제하고 수정하기만 하면 됩니다...

Mikrotik-router-hack

WinboxExploit Это доказательство концепции критической уязвимости WinBox CVE-2018-14847, которая позволяет произвольное чтение файлов с паролями в открытом виде. Уязвимость давно исправлена, поэтому этот проект завершён и больше не будет поддерживаться или обновляться. Вы можете форкнуть его и...

Digisol-DG--GR1321-s-Password-Storage-in-Plaintext--CVE-2024-4232

Digisol-DG--GR1321-的-明文密码存储--CVE-2024-4232...

CVE-2018-14847

CVE-2018-14847 Это proof of concept критической уязвимости WinBox CVE-2018-14847, которая позволяет произвольное чтение файлов с паролями в открытом виде. Уязвимость давно исправлена, поэтому этот проект завершён и больше не будет поддерживаться или обновляться. Вы можете форкнуть его и обновить...

CVE-2025-26199

🛡️ CVE-2025-26199 — Небезопасная передача пароля в открытом виде в CloudClassroom-PHP-Project v1.0 📄 Описание CloudClassroom-PHP-Project v1.0 уязвим к небезопасной передаче учетных данных пользователя. В процессе аутентификации пароли отправляются по незашифрованному HTTP, а не по HTTPS. Это делае...

CVE-2023-33730

CVE-2023-33730 — eScan Management Console 권한 상승 심각도: 심각 CVE ID: CVE-2023-33730 공개일: 2023년 5월 30일 작성자: Sahil Ojha 목차 개요 취약점 세부 정보 영향 기술 분석 개념 증명 해결 방법 참고 자료 면책 조항 개요 eScan Management Console 은 Microworld Technologies 에서 개발한 중앙 집중식 보안 관리 솔루션입니다. 기업 IT 관리자가 단일 웹 기반 콘솔을 통해 네트워크 전체에서 eScan 안티바이러스/엔드포인...

CVE-2026-16983

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role...

Alibaba Cloud Linux 3 : 0274: pam (ALINUX3-SA-2026:0274)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0274 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-54411: Linux-PAM through 1.7.2 contains an...

CVE-2025-48708

CVE-2025-48708 Описание Уязвимость в Artifex Ghostscript версии до 10.05.1 приводит к тому, что пароль в открытом виде, используемый для защиты PDF-файла, встраивается в выходные данные. Проблема вызвана отсутствием санитизации аргументов в gslibctxstashsanitizedarg base/gslibctx.c, особенно при...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

RHEL 8 : pam (RHSA-2026:61224)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61224 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

RHEL 9 : pam (RHSA-2026:61230)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61230 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

RHEL 9 : pam (RHSA-2026:61228)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61228 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

RHEL 8 : pam (RHSA-2026:61223)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61223 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...