RdpThief

RdpThief RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and...

mimipenguin

MimiPenguin 2.0 一种用于从当前 Linux 桌面用户转储登录密码的工具。改编自流行 Windows 工具 mimikatz 背后的思路。此漏洞被分配了 CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781。有趣的是，它在 GNOME Keyring 3.27.2 之后仍未修复，并且在 3.28.0.2-1ubuntu1.18.04.1 中仍然有效。 详细信息 通过转储进程并提取包含明文密码概率较高的行，利用内存中的明文凭据。将尝试通过检查 /etc/shadow...

rConfig <=3.9.4 - SQL Injection

rConfig 3.9.4 and prior has unauthenticated snippets.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10549 info: name: rConfig 3.9.4 or apply th...

SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever...

c0ntextomy

c0ntextomy una falacia informal y un tipo de atribución falsa en la que se extrae un pasaje de su contexto circundante de manera que se distorsiona su significado previsto Wikipedia - Contextomy Una Prueba de Concepto que demuestra la vulnerabilidad con un secuestro de sesión de depuración,...

EUVD-2025-210960

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421

IBM Controller versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 are affected by a cleartext transmission vulnerability (CWE-319 ). The product transmits data without encryption, allowing an attacker positioned between the client and server to intercept and obtain sensitive informa...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36421 Multiple vulnerabilities in IBM Controller

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: Almacenamiento en texto claro de información sensible en memoria. Easywork Enterprise 2.1.3.354 es vulnerable al almacenamiento en texto claro de información sensible en memoria. La aplicación deja claves de licencia válidas vinculadas al dispositivo en la memoria d...

EUVD-2026-81008

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

CVE-2026-73457 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...

CVE-2026-73457

CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled. When the EosRpcAuth trace facility is explicitly activated on the Gnpsi agent, client credentials (username and password) are written in clear text to local or remote accounting logs, acce...

CVE-2026-73466

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

EUVD-2026-79024

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

Astra Linux – Vulnerability in Ceph

A flaw was discovered in Ceph versions prior to 16.y.z, where Ceph stores mgr module passwords in plain text. This can be identified by searching the mgr logs using Grafana and the dashboard, as the passwords are visible...

MariaDB 3.4.0 < 3.4.10

The version of MariaDB installed on the remote host is prior to 3.4.10. It is, therefore, affected by a vulnerability as referenced in the GHSA-fmq9-qjxj-qpf7 advisory. - Impact In the Zero-Configuration SSL protocol, the MariaDB client must refuse sending clear-text password over unverified TLS...

org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

Summary The connector does not gate clear-text password authentication plugins on transport encryption. A hostile or man-in-the-middle MariaDB server can request a clear-text plugin over an unencrypted plain-TCP connection, and the driver responds with the user's password in cleartext on the wire...

EUVD-2026-68023

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a...

CVE-2026-55215

MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...