60 matches found
DEBIAN-CVE-2026-92768
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...
CVE-2026-92745
A flaw in cockpit-machines allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token . The token is exposed because it is passed as a command-line argument to a helper script during the token validation proces...
CVE-2026-92745 Cockpit-machines: cockpit-machines: information disclosure of rhsm offline token via process arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
CVE-2026-18915 Exposure of OTP Secret Through Process Command-Line Arguments in TÜBİTAK BİLGEM's eta-otp-lock
Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4...
MAL-2026-6070 Malicious code in libsc-runtime-telemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280cf690237f367f57670f695c85d84227b06c563f5f1c1c3f69d437c52cbfe4 Importing libsc-runtime-telemetry auto-invokes a bootstrap routine that schedules a periodic job collecting host identity hostname, public IP, revers...
CVE-2026-1995
In versions before 7.0.0.64, IDrive’s idservice.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory. The UTF16-LE encoded contents of these files are used as arguments for starting a process, but they can be edited by any...
BIT-RABBITMQ-C-2023-35789
An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a process and its arguments...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
EUVD-2025-74041
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
CVE-2025-6571
CVE-2025-6571 affects AXIS OS (Axis edge device OS). A third-party component exposes its password in process arguments, allowing low-privilege users to access it. The available documents describe the root cause (password exposure in parameters) and the impact (local access by low-privilege users)...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
CVE-2025-6571
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
CVE-2025-6571: Insufficiently Protected Credentials
A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it...
PT-2025-46308
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A third-party component exposed its password in process arguments, potentially allowing low-privileged users to access it. Recommendations At the moment, there ...
EUVD-2013-5019
Malware in sbrugna...
EUVD-2010-0151
Malware in sbrugna...
Missing Password Field Masking
Overview Affected versions of this package are vulnerable to Missing Password Field Masking due to improper handling of process command arguments containing sensitive information. An attacker can obtain confidential data by accessing security event logs where sensitive arguments, such as password...
NoArgs - Tool Designed To Dynamically Spoof And Conceal Process Arguments While Staying Undetected
NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly. Default Cmd: Windows Event Logs...
