CVE-2026-67406

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2...

CVE-2025-58443

CVE-2025-58443 https://github.com/FOGProject/fogproject 向けのエクスプロイトPOCです。認証バイパスによりDBダンプが可能となり、完全なDBダンプには平文パスワード、ユーザー、管理者パスワードのハッシュが含まれます。 影響を受けるバージョン : 1.5.10.1673 以下はこの脆弱性を悪用するスクリプトで、以下のことが可能です： MySQL DB全体のダンプ SSRF脆弱性の悪用 サーバー上のファイル一覧の取得 DBダンプには、FTPなどのハッシュ化されたパスワードと平文パスワードが含まれます... 結果： SSRFエクスプロイト...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ssh-mitm

SSH MITM v2.3-dev 저자: Joe Testa @therealjoetesta 개요 이 침투 테스트 도구는 감사자가 SSH 연결을 가로챌 수 있게 해줍니다. OpenSSH v7.5p1 소스 코드에 적용된 패치로 인해 피해자와 의도한 SSH 서버 사이에서 프록시 역할을 하며, 모든 평문 비밀번호와 세션이 디스크에 기록됩니다. 물론 피해자의 SSH 클라이언트는 서버의 키가 변경되었다고 경고할 것입니다. 그러나 99.99999%의 경우 이는 합법적인 작업OS 재설치, 설정 변경 등으로 인해 발생하기 때문에, 대부분의 사용자...

CVE-2026-67221

A flaw was found in RabbitMQ, a messaging and streaming broker. The AMQP 1.0 shovel component incorrectly stores connection Uniform Resource Identifiers URIs with embedded plaintext passwords. This information can be exposed to an authenticated attacker with monitoring privileges via the...

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

Summary When plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...

CVE-2023-49367

CVE-2023-49367 - 機密データの露出 KyoceraプリンターWebパネルにおける機密データの露出 ベンダー: Kyocera Corporation 影響を受けるバージョン: Command Center RX - EXOSYS M5521cdn 説明 Kyoceraインターフェースのアドレス帳に接続した後、送信パケット内にsmbおよびftpのテストリクエストが確認できます。これらのリクエストには平文のパスワードが含まれており、調査すると、これらの平文パスワードを傍受することができます。 POC アドレス帳ページに移動 任意の保存済みユーザー をクリック...

EUVD-2026-84546

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verifypassword in lightrag/api/passwords.py compares plaintext AUTHACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching byte, creating response-time differences...

CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-73466 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

CVE-2026-73466 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

rabbitmq: RabbitMQ: Information disclosure of AMQP 1.0 shovel URI passwords

A flaw was found in RabbitMQ, a messaging and streaming broker. The AMQP 1.0 shovel component incorrectly stores connection Uniform Resource Identifiers URIs with embedded plaintext passwords. This information can be exposed to an authenticated attacker with monitoring privileges via the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-wmi-sysman: Do not perform hex dumping of plaintext password data. The setnewpassword function performs hex dumping of the entire buffer, which contains plaintext password data, including current and new...

Astra Linux – Vulnerability in Zabbix

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-86175 NetBox through 4.7.0 Credential Disclosure via REST and GraphQL APIs

NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permission can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, gaining unauthorized access to...

CVE-2026-16983: Exposure of Sensitive Information to an Unauthorized Actor

The Gutentor WordPress plugin before 4.0.6 does not apply the correct context restriction to one of its REST endpoints, exposing the plaintext passwords of password-protected posts to any authenticated user with at least the Subscriber role...

PT-2026-71330

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...

CVE-2026-71260

ESPHome through 2026.7.0-dev discloses plaintext passwords via its webserver component. In WebServer::textjson esphome/components/webserver/webserver.cpp, a text entity configured with mode: password TEXTMODEPASSWORD has its JSON "state" field correctly masked as "", but the same serialization pa...