CVE-2025-69428

Avviso di Sicurezza - CVE-2025-69428 Titolo: Accesso Non Autenticato a Directory Sensibile Divulgazione di Informazioni ID CVE: CVE-2025-69428 Descrizione Una vulnerabilità critica di controllo degli accessi nell'applicazione Pro-Bit distribuita localmente nelle versioni precedenti alla v1.77.4...

iCULeak.py

iCULeak.py Strumento per trovare ed estrarre credenziali da file di configurazione telefonici in ambienti gestiti da Cisco CUCM Call Manager. Quando si utilizza Cisco CUCM Call Manager, i file di configurazione dei telefoni sono archiviati su un server TFTP. Questi file di configurazione dei...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...

enject

enject Nascondi i segreti del tuo .env dagli occhi delle AI. Nota: questo progetto in precedenza si chiamava enveil ed è stato rinominato in enject Strumenti di AI per la scrittura di codice come Claude Code, Copilot, Cursor e altri possono leggere i file nella directory del tuo progetto, il che...

cve-2018-9995

cve-2018-9995 DVR، واسمه الكامل Digital Video Recorder مسجل القرص الصلب، أي مسجل الفيديو الرقمي. بالمقارنة مع كاميرات الفيديو التناظرية التقليدية، يعتمد على التسجيل عبر القرص الصلب، ولذلك يُطلق عليه غالبًا اسم مسجل القرص الصلب، ويُعرف أيضًا باسم DVR. تسمح هذه الثغرة للمهاجم، بعد تعديل "Cookie:...

CVE-2022-39841

CVE-2022-39841 Il WebSocket di Medusa che perde dati Per maggiori informazioni, leggi il post del blog Riepilogo Una vulnerabilità critica in Medusa consente la fuga di informazioni, incluse le credenziali in chiaro, collegandosi a un WebSocket non autenticato e attendendo che un utente apporti u...

CVE-2021-27187

CVE-2021-27187 الوصف المقترح يقوم عميل الطرفية FX Aggregator من "Sovremennye Delovye Tekhnologii" بتخزين بيانات اعتماد المصادقة في نص واضح داخل ملف login.sav عندما يكون مربع "حفظ كلمة المرور" محددًا. نوع الثغرة: أخرى CWE-522 بيانات اعتماد محمية بشكل غير كافٍ بائع المنتج OOO Sovremennye Delovye...

bkcrack

bkcrack Cracke ältere Zip-Verschlüsselung mit dem Known-Plaintext-Angriff von Biham und Kocher. Überblick Ein ZIP-Archiv kann viele Einträge enthalten, deren Inhalt komprimiert und/oder verschlüsselt sein kann. Insbesondere können Einträge mit einem passwortbasierten symmetrischen...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

RLSA-2026:59379 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...

CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB Passwort-Dumper CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG ist eine freie Software, die es Benutzern ermöglicht, Multi-Protokoll-Verbindungskonfigurationen zu speichern und zu verwalten, um sich remote mit Systemen zu verbinden...

RHEL 9 : pam (RHSA-2026:60224)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60224 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...

Linux Distros Unpatched Vulnerability : CVE-2026-79782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can...

RockyLinux 10 : pam (RLSA-2026:59379)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59379 advisory. linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 Tenable has extracted the preceding description block directly...

CVE-2025-63667

CVE-2025-63667 — Evidenza di vulnerabilità per telecamere IP basate su Vatilon Sanitizzata Riepilogo Diverse telecamere IP basate su Vatilon marchi osservati: SIMICAM, KEVIEW, ASECAM rilasciano token Session-Id senza verificare la correttezza delle credenziali. Questa falla consente a utenti non...

leakdb

LeakDB LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext "Have I Been Pwned"-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large...

NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard هي أداة مصممة لتجاوز Credential Guard عن طريق تصحيح patching WDigest.dll باستخدام دوال NTAPI فقط التي يصدرها ntdll.dll. وهي متوفرة بنسختين: C وC++. تحدد الأداة النمط "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?? 00" في ملف WDigest.dll الموجود على القرص كما هو موضح ...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

CVE-2025-67159

CVE-2025-67159 — Vatilon-basierte IP-Kameras Zusammenfassung Die Firmware von Vatilon-basierten IP-Kameras enthält eine Authentifizierungsumgehung und Offenlegung von Klartext-Anmeldedaten in der API /cgi-bin/web.cgi. Die Weboberfläche verarbeitet Anfragen mit den Parametern username und password...