1699 matches found
curl: HSTS bypass via IDN
A vulnerability was found in curl. The issue can occur when curl's HSTS check is bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of an insecure clear-text HTTP step even when providing HTTP in the URL. Suppose the hostname in the given...
IBM Maximo Application Suite 安全漏洞
IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A security vulnerability exists in IBM Maximo Application Suite - Manage Component version 8.8.0, versio...
Export feature adds clear text password to the directories configuration on the zip file - Import fails with "Can't decrypt data"
h3. Problem When exporting a Bamboo configuration, the resulting zip file will contain clear-text passwords on db-export/directories.xml. This introduces a security issue and a broken import with the following error: code:java 2023-05-22 15:18:52,590 INFO main SecretEncryptionServiceImpl Can't...
Cisco DNA Center Information Disclosure (cisco-sa-dnac-infodisc-pe7zAbdR)
The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.7 or is 2.3.5.0. It may, therefore, be affected by an information disclosure vulnerability if configured for PnP operation and to push configuration files to other Cisco external devices on the network. Due to improper...
Security Bulletin: IBM InfoSphere Information Server is vulnerable due to insecure storage of sensitive information (CVE-2023-22878)
Summary A vulnerability due to insecure storage of sensitive information was addressed in InfoSphere Information Server. Vulnerability Details CVEID:CVE-2023-22878 DESCRIPTION: IBM InfoSphere Information Server stores user credentials in plain clear text which can be read by a local user. CVSS Ba...
Seiko Solutions SkyBridge 安全漏洞
Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A100/110 firmware version 4.2.0 and earlier versions, which originates from storing sensitive information in clear text. An attacker could exploit the...
Seiko Solutions SkyBridge 安全漏洞
Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge MB-A100/110 firmware version 4.2.0 and earlier versions, which originates from storing sensitive information in clear text...
Tenda N301 安全漏洞
Tenda N301 is a wireless router from Tenda China. A security vulnerability exists in the Tenda N301 version v6.0, which stems from the presence of a clear-text transmission that allows an authenticated attacker on a LAN or WLAN to intercept communication with the router and obtain a password...
Tenda N301 安全漏洞
Tenda N301 is a wireless router from Tenda China. A security vulnerability exists in the Tenda N301 version v6.0, which stems from the presence of a clear-text transmission that allows an authenticated attacker on a LAN or WLAN to intercept communication with the router and obtain a password...
CVE-2022-4308 Clear-text passwords in configuration files
Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...
CVE-2022-4308 Clear-text passwords in configuration files
Plaintext Storage of a Password vulnerability in Secomea GateManager USB wizard allows Authentication abuse on SiteManager, if the generated file is leaked...
Automating Qakbot Detection at Scale With Velociraptor
In this blog, you will learn a practical methodology to extract configuration data from recent Qakbot samples. I will provide some background on Qakbot, then walk through decode themes in an easy to visualize manner. Additionally, I'll share a Velociraptor artifact to detect and automate the deco...
Omron SYSMAC CS/CJ/CP Series 访问控制错误漏洞
The Omron SYSMAC CS/CJ/CP Series is a series of programmable controllers from Omron Corporation Japan. A security vulnerability exists in the Omron SYSMAC CS/CJ/CP Series due to a security issue with the FINS protocol that involves clear-text communication, undefined authentication, and other...
Osprey Pump Controller 1.0.1 - Predictable Session Token / Session Hijack
Exploit Title: Osprey Pump Controller 1.0.1 - Predictable Session Token / Session Hijack Exploit Author: LiquidWorm Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version: Software Build ID 20211018, Production...
CVE-2022-43772
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs...
CVE-2022-43772
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs...
Information disclosure
Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.9 and below on Windows allows an attacker with access to the user interface to obtain sensitive information via the error message dialog that displays the password in clear text...
samba 安全漏洞
Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in samba that stems from the AD DC administration tool, samba-tool, which sends passwords in clear text...
CVE-2023-27927
An authenticated malicious user could acquire the simple mail transfer protocol SMTP Password in cleartext format, despite it being protected and hidden behind asterisks. The attacker could then perform further attacks using the SMTP credentials...
SAUTER EY-modulo 5 Building Automation Station 安全漏洞
SAUTER EY-modulo 5 Building Automation Station is a complete building management solution from SAUTER. A security vulnerability exists in SAUTER EY-modulo 5 Building Automation Station, which results from sensitive information being transmitted in clear text...