Invoke-WCMDump

Invoke-WCMDump PowerShell 脚本，用于从凭据管理器中转储 Windows 凭据 Invoke-WCMDump 枚举凭据管理器中的 Windows 凭据，然后提取每个凭据的可用信息。对于“Generic”类型的凭据，可以检索密码；对于“Domain”类型的凭据，则无法通过相同方法检索。仅返回当前用户的凭据。 不需要管理员权限！ 作者：Barrett Adams（@peewpw） 示例 root@kitploit: PSImport-Module .\Invoke-WCMDump.ps1 PSInvoke-WCMDump Username : testusername...

BackupCreds

BackupCreds root@kitploit: | | | | | | | Dump all the Creds! | | | | | | | | | | | | Lefteris lefty Panos | || Abusando de SeTrustedCredmanAccessPrivilege para volcar las credenciales de usuario El programa proporciona la capacidad de volcar las credenciales almacenadas que un usuario pueda tener...

EUVD-2026-38604

Module: plugins/modules/keyringinfo.py CVSS 3.1: 5.5 MEDIUM — AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native keyring GNOME Keyring, macOS Keychain, Windows Credential Manager and places it directly into result"passphrase" with no output suppression...

EUVD-2019-1589

Malware in sbrugna...

EUVD-2023-25893

Malicious code in bioql PyPI...

CVE-2019-0838

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839...

Code injection

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...

Bitwarden: Biometric key is stored in Windows Credential Manager, accessible to other local unprivileged processes

A vulnerability in Bitwarden Desktop for Windows allowed a local attacker to access the biometric master key used for unlocking the vault through Windows Hello. The key was stored in plaintext in the Windows Credential Manager, accessible to any local unprivileged process. This allowed an attacke...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726

Windows Credential Manager User Interface Elevation of Privilege Vulnerability...

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

PT-2023-1141 · Microsoft · Windows Credential Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Credential Manager versions affected versions not specified Description: An elevation-of-privilege vulnerability allows attackers to affect the system. The issue is related to the Windows Credential Manager user interface and is...

CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability

...

wincred 操作系统命令注入漏洞

wincred is an open source node.js package. Used to use Python3 script to get credentials from the "Windows Credential Manager". A command execution vulnerability exists in wincred, which stems from the possibility of executing arbitrary commands if user input under the control of an attacker is...

Microsoft Windows Multiple Vulnerabilities (KB4493475)

This host is missing a critical security update according to Microsoft KB4493475 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-0838

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839...

Information disclosure

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager, aka 'Windows Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0839...

Windows Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Task Scheduler improperly discloses credentials to Windows Credential Manager. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. An attacker could then install...