SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever...

RdpThief

RdpThief RdpThief 本身是一个独立的 DLL，当注入到 mstsc.exe 进程时，会执行 API 挂钩，提取明文凭据并将其保存到文件中。 它附带一个攻击脚本，用于管理状态、监控新进程并将 shellcode 注入到 mstsc.exe 中。该 DLL 已使用 sRDI 项目 https://github.com/monoxgas/sRDI 转换为 shellcode。启用后，RdpThief 将每 5 秒获取一次进程列表，搜索 mstsc.exe 并注入其中。 当攻击脚本加载到 Cobalt Strike 中时，将提供三个新命令： rdpthiefenable –...

EUVD-2026-19697

An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 5.3...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2026-16129)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server. The...

IBM InfoSphere Information Server 安全漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server. The...

CVE-2026-0503

Due to missing authorization check in the SAP ERP Central Component SAP ECC and SAP S/4HANA SAP EHS Management, an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can...

CVE-2019-11663

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2026-22537

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22544

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22544

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22537

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

CVE-2026-22537

CVE-2026-22537 concerns Efacec QC electric vehicle charging posts (60/90/120). The core issue is insufficient system hardening that could let a user with management/maintenance access read files containing plaintext credentials or other sensitive information. Reported by Red Hat, NVD, CNNVD, CIRC...

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

CVE-2026-22544

CVE-2026-22544 is described across multiple feeds as a vulnerability where credentials can be detected in clear text over a network. Connected sources confirm the impact across various contexts, including a specific example in Efacec QC charging posts (CNNVD) and generic network exposure (NVD, Re...

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

PT-2026-2206

Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description An attacker with a network connection could detect credentials in clear text. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

Vatilon IP Cameras 安全漏洞

Vatilon IP Cameras are a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP Cameras version v1.12.37-20240124, which originates from transmitting user credentials in clear text...

HCL Workload Scheduler 安全漏洞

HCL Workload Scheduler is a workload scheduler from HCL India. A security vulnerability exists in HCL Workload Scheduler that stems from storing user credentials in clear text, which could be read by a local user...