TeamViewer-dumper-in-CPP

TeamViewer-dumper-in-CPP Dumps TeamViewer ID,Password and account settings from a running TeamViewer instance by enumerating child windows. Compilation and requirements 1. Compile with CL 2. cl TeamViewerDump.cpp 3. or with cl TeamViewerDump.cpp /EHsc 4. Requirements 5. TeamViewer must be running...

CVE-2026-113693

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

CVE-2026-113693

The BMC IT Service Management Suite (versions 25.3.01, 25.4.01, and 26.1.01) is vulnerable to a credential disclosure flaw within the SmartIT system-account settings . This vulnerability allows authenticated users to retrieve a system username and an encrypted password value. The issue is categor...

CVE-2026-113693 System Account Credential Disclosure in BMC ITSM

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

CVE-2026-113693 System Account Credential Disclosure in BMC ITSM

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

EUVD-2026-112823

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

PT-2026-132116

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

BMC IT Service Management Suite information disclosure vulnerability

Versions 25.3.01, 25.4.01, and 26.1.01 of the BMC IT Service Management Suite contain an information disclosure vulnerability. This vulnerability stems from sensitive information exposure in SmartIT system-account settings, potentially allowing authenticated users to retrieve system usernames and...

Elastic Cloud Enterprise authorization issue vulnerability

Versions 3.8.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain an authorization issue vulnerability. This vulnerability stems from improper authorization; authenticated users with read-only access can modify account settings via functions not properly restricted by ACLs...

CVE-2026-113693: BMC BMC IT Service Management Suite: Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions…

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value...

EUVD-2026-75126

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

CVE-2026-73789: Improper Access Control

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

Basecamp: A third-party Basecamp OAuth token mints a full launchpad web session through GET /my/login_option

A third-party OAuth token was able to mint a full web session through an API endpoint, allowing an integration to obtain unauthorized session access and modify account settings. The vulnerability has been patched to only accept authorized session tokens...

Malicious code in @or-sdk/account-settings (npm)

npm/@or-sdk/account-settings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malware in @or-sdk/account-settings

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-11665 Malicious code in @or-sdk/account-settings (npm)

npm/@or-sdk/account-settings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CVE-2026-54367

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...

CVE-2026-54367 CentreStack < 17.2 Unauthenticated API Authorization Bypass

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...

CVE-2026-54367

CentreStack prior to version 17.2 suffers an authentication bypass allowing unauthenticated attackers to read, modify, or delete arbitrary account settings by targeting exposed API endpoints with no authorization checks. Attackers can craft valid EntAcctId values by using a static shared encrypti...

CVE-2026-54367

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...