CVE-2026-69658 Ebyte NE2-D11 Cleartext Transmission of Sensitive Information

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2026-73809

A cleartext transmission vulnerability in Ebyte gateway products (including the NE2-D11) affects the web management interface , which does not adequately enforce transport-layer encryption . An attacker with network access could intercept authentication or session data, leading to disclosure of s...

CVE-2026-73809 Ebyte NE2-D11 Cleartext Transmission of Sensitive Information

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

CVE-2026-81836

A vulnerability in RooCodeInc Roo-Code (up to version 3.51.1) affects the OAuth Callback component in the file src/integrations/claude-code/oauth.ts, where sensitive information is transmitted in cleartext. The attack is remote with no required authentication but carries high complexity . A proof...

CVE-2026-81691 openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs

opensslencrypt versions before 1.4.9 fail to validate server URLs in login and registerwithemail functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cleartext credentials including clientid, passwords, and JWTs to achieve full keyserve...

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 è stato pubblicato ufficialmente da MITRE. Panoramica della Vulnerabilità...

http-stalling-detector

HTTP Stalling Detector HTTP स्टॉलिंग DoS हमले एक वेबसर्वर की इस अक्षमता का फायदा उठाते हैं कि वह यह निर्धारित नहीं कर पाता कि दूरस्थ क्लाइंट केवल धीमे लिंक पर जुड़ा है या दूरस्थ क्लाइंट जानबूझकर बहुत धीमी गति से डेटा भेज रहा है ताकि वेबसर्वर टाइमआउट न करे और स्थानीय सिस्टम संसाधनों को संरक्षित कर...

PT-2026-82781

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

PT-2026-82802

A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...

PT-2026-82777

MQTT credentials and control traffic are transmitted in cleartext, exposing sensitive information to network-level attackers. This may enable unauthorized device impersonation and disruption of messaging functions...

CVE-2020-25748

CVE-2020-25748 Vorgeschlagene Beschreibung Ein Problem mit der Klartextübertragung wurde entdeckt an den Kameras Rubetek RV-3406, RV-3409 und RV-3411 Firmware-Versionen v342, v339. Ein Angreifer in der Mitte kann die Videodaten der Kamera abfangen und modifizieren, welche unverschlüsselt übertrag...

piraterf

🏴‍☠️ PIrateRF - Piattaforma di Trasmissione Radio a Definizione Software PIrateRF trasforma il tuo Raspberry Pi Zero W in un generatore di segnali RF portatile che crea il proprio hotspot WiFi. Controlla tutto, dalle trasmissioni FM ai modi digitali, attraverso il tuo browser - hackerai le onde...

CVE-2026-46817

🚨 CVE-2026-46817 - Execução Remota de Código Crítica Oracle E-Business Suite – Oracle Payments Transmissão de Arquivos Vulnerabilidade remota crítica não autenticada que afeta o Oracle Payments Transmissão de Arquivos e pode permitir o comprometimento total da aplicação via HTTP. 📌 Visão Geral...

TagTinker

TagTinker V2.1 Kit di ricerca per ESL a infrarossi per Flipper Zero Studio dei protocolli • Analisi dei segnali • Arte digitale → Avvia l'app web di preparazione immagini TagTinker ← Panoramica TagTinker è un'app per Flipper Zero per esplorare i protocolli a infrarossi delle etichette elettronich...

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

CVE-2026-29988

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

EUVD-2026-66229

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

EUVD-2026-66228

duplicate record...

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

CVE-2026-77131

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...